Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
46fc63b9b4282b86b061d183f99bf173c381a1fdef07cec2ec18d537b0ff37c3.dll
Resource
win10v2004-20240226-en
Target
46fc63b9b4282b86b061d183f99bf173c381a1fdef07cec2ec18d537b0ff37c3
Size
426KB
MD5
7b740bbcf898231795b2a8a361fce974
SHA1
c625e7cfc7661c587efadfa4569af95778b5a619
SHA256
46fc63b9b4282b86b061d183f99bf173c381a1fdef07cec2ec18d537b0ff37c3
SHA512
02deacc779ad6e406d6cf447ee212c9af48a9cdca285066da3ec47d87e59ec95de2882a2e66057170a21919a11b2447a2289328f6a2ea850737c7995b7820eaa
SSDEEP
12288:iFE7TT5vJN2pchzxFqCHYSuf6FSS2dvBjvrEH7ff:dTBJN2pc3FrHYSufg2ddrEH7ff
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
coml2.pdb
_lock
memcmp
_ftol2
_XcptFilter
_vsnwprintf
_purecall
_unlock
_wcsnicmp
wcsstr
_resetstkoflw
wcsncmp
memmove
qsort
_onexit
memcpy
_wcsicmp
_except_handler4_common
_initterm
malloc
free
_amsg_exit
__dllonexit
memset
CleanupTlsComl2State
CleanupComl2StateInAllTls
FreePropVariantArrayWorker
InternalServerExceptionFilter
InternalCoStdMarshalObject
InternalTlsAllocData
RtlImageNtHeader
RtlAllocateHeap
NtSetInformationFile
RtlGetCurrentDirectory_U
NtCreateFile
RtlInitUnicodeString
NtClose
RtlFreeHeap
RtlDosPathNameToNtPathName_U
RtlRaiseStatus
NtMapViewOfSection
NtQueryInformationFile
NtQueryVolumeInformationFile
RtlInitializeCriticalSectionAndSpinCount
RtlNtStatusToDosError
NtQuerySystemInformation
EtwGetTraceLoggerHandle
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwTraceMessage
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
RtlInitializeCriticalSection
NtQueryObject
GetLastError
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileSize
GetFileInformationByHandle
GetFileTime
UnlockFile
LockFile
FlushFileBuffers
WriteFile
SetEndOfFile
GetTempPathW
GetFileType
SetFileTime
CreateFileW
GetFileAttributesW
GetFullPathNameW
ReadFile
SetFilePointer
DeleteFileW
DuplicateHandle
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
HeapReAlloc
GetOverlappedResult
GetModuleHandleW
GetModuleFileNameW
GetACP
GetUserDefaultLCID
UnmapViewOfFile
FlushViewOfFile
VirtualAlloc
MapViewOfFileEx
CreateFileMappingW
SetThreadToken
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
OpenThreadToken
GetCurrentThread
ProcessIdToSessionId
OpenProcess
OpenProcessToken
QueryPerformanceCounter
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CompareStringW
WideCharToMultiByte
MultiByteToWideChar
OpenEventW
LeaveCriticalSection
EnterCriticalSection
CreateEventW
SetEvent
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
Sleep
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetTokenInformation
IsValidSecurityDescriptor
InitializeAcl
AllocateLocallyUniqueId
CLSIDFromString
StringFromCLSID
PropVariantClear
CoGetMalloc
CoTaskMemFree
CoCreateInstance
PropVariantCopy
CoUnmarshalInterface
CoGetStandardMarshal
CoTaskMemRealloc
CreateStreamOnHGlobal
CoReleaseMarshalData
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
IsCharAlphaW
TraceMessage
GlobalReAlloc
GlobalFree
GlobalUnlock
GlobalAlloc
LocalFree
GlobalLock
GlobalSize
GlobalMemoryStatus
lstrcmpW
lstrcmpiW
SystemTimeToFileTime
ApiSetQueryApiSetPresence
ProcessPrng
DelayLoadFailureHook
ResolveDelayLoadedAPI
Coml2DllGetClassObject
CreateILockBytesOnHGlobal
DllGetClassObject
FmtIdToPropStgName
GetConvertStg
GetHGlobalFromILockBytes
PropStgNameToFmtId
ReadClassStg
ReadClassStm
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgCreatePropSetStg
StgCreatePropStg
StgCreateStorageEx
StgIsStorageFile
StgIsStorageILockBytes
StgOpenPropStg
StgOpenStorage
StgOpenStorageEx
StgOpenStorageOnILockBytes
StgSetTimes
WriteClassStg
WriteClassStm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ