Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4e827fe46a4c2d628985695dfafb3ff665493516f0ec397cfceaec1d201ae80c.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4e827fe46a4c2d628985695dfafb3ff665493516f0ec397cfceaec1d201ae80c.dll
Resource
win10v2004-20240412-en
Target
4e827fe46a4c2d628985695dfafb3ff665493516f0ec397cfceaec1d201ae80c
Size
523KB
MD5
d2f362112bb795f603aa732bb19ddbc5
SHA1
17c24be4e526e3372c218cfee8a85787709a9f7c
SHA256
4e827fe46a4c2d628985695dfafb3ff665493516f0ec397cfceaec1d201ae80c
SHA512
5d9080d59f7fae09317aada41fba23bc7b8cb4fd3f7e695f634a237ac88e69edb14c3cb61083be95b0d52819909de8c024d05a5d61f78dea7e4cdf00eab8edae
SSDEEP
12288:STyu1dr5J7RpUVV+VbA0fU9nwRS4fwvP:edrnR1e9wRPfK
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\PF\PCFILTER V2.0\CUSTOM ver\PCFILTER Agent V2.0(전남대학교)\release\PCFILTEREraser.pdb
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetModuleHandleA
InterlockedIncrement
SetErrorMode
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetCommandLineA
RtlUnwind
RaiseException
ExitProcess
ExitThread
CreateThread
HeapSize
GetCPInfo
IsValidCodePage
LCMapStringA
LCMapStringW
GlobalHandle
HeapCreate
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
SetEnvironmentVariableA
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
GetPrivateProfileStringW
GetPrivateProfileIntW
InterlockedDecrement
SuspendThread
ResumeThread
SetThreadPriority
GetFullPathNameW
DuplicateHandle
UnlockFile
LockFile
GetThreadLocale
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
ReleaseMutex
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetVersionExA
WritePrivateProfileStringW
VirtualLock
GetUserDefaultLCID
GetSystemTime
GetUserDefaultLangID
GetProcessTimes
GetThreadTimes
GlobalMemoryStatus
CreateEventW
GetProcessHeap
QueryPerformanceCounter
GetStartupInfoW
GetCurrentThread
GetSystemInfo
GetCurrentProcessId
GetLogicalDrives
GetACP
GetOEMCP
GetSystemDefaultLCID
GetSystemDefaultLangID
GetTimeZoneInformation
VirtualUnlock
lstrlenW
CreateDirectoryW
GetFileTime
GetVolumeInformationW
GetModuleFileNameW
GetFileAttributesW
SetLastError
SetEndOfFile
GetFileSize
SetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
LocalFree
FormatMessageW
InterlockedCompareExchange
DeviceIoControl
ReadFile
GetLastError
CloseHandle
CreateFileW
VirtualAlloc
FreeLibrary
GetDiskFreeSpaceW
CreateMutexW
GetProcAddress
LoadLibraryW
RemoveDirectoryW
MultiByteToWideChar
DeleteFileW
SetFileAttributesW
GetWindowsDirectoryW
GetCurrentThreadId
FindClose
SetEvent
SetSystemPowerState
FindNextFileW
TerminateThread
FindFirstFileW
Sleep
MoveFileW
GetCurrentProcess
GetExitCodeThread
lstrcpynW
VirtualFree
GetVersionExW
GetShortPathNameW
ResetEvent
FlushFileBuffers
WriteFile
WaitForSingleObject
SetFilePointer
GetTickCount
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FindResourceW
LoadResource
LockResource
HeapDestroy
SizeofResource
DrawTextW
TabbedTextOutW
DestroyMenu
LoadCursorW
GetDC
ReleaseDC
GetSysColorBrush
ClientToScreen
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
ValidateRect
CharUpperW
PostQuitMessage
RegisterWindowMessageW
LoadIconW
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetLastActivePopup
DispatchMessageW
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
PeekMessageW
MapWindowPoints
GetKeyState
DrawTextExW
SetForegroundWindow
IsWindowVisible
GetClientRect
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CopyRect
PtInRect
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetWindowTextW
GetParent
SetWindowPos
IsWindowEnabled
ShowWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
GrayStringW
UnregisterClassW
GetDlgItem
GetWindow
wsprintfW
GetSystemMetrics
GetProcessWindowStation
GetOpenClipboardWindow
GetMessageTime
GetMessagePos
GetInputState
GetForegroundWindow
GetFocus
GetDesktopWindow
GetClipboardViewer
GetCaretBlinkTime
GetClipboardOwner
GetDoubleClickTime
GetCapture
GetKeyboardType
GetActiveWindow
GetKeyboardLayout
GetCursorPos
GetCaretPos
GetDialogBaseUnits
GetSysColor
ExitWindowsEx
IsWindow
PostMessageW
SendMessageW
EnableWindow
AdjustWindowRectEx
UnregisterClassA
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
ExtTextOutW
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetDeviceCaps
DeleteObject
GetFileTitleW
ClosePrinter
DocumentPropertiesW
OpenPrinterW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
LookupAccountSidW
OpenThreadToken
GetSidSubAuthorityCount
GetSidIdentifierAuthority
RegEnumKeyExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW
GetAclInformation
AddAce
InitializeAcl
MakeAbsoluteSD
GetSecurityDescriptorControl
GetSecurityDescriptorLength
MakeSelfRelativeSD
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetUserNameW
GetSecurityDescriptorGroup
IsValidSid
RegSetValueExW
GetSecurityDescriptorOwner
GetLengthSid
LookupAccountNameW
RegCreateKeyExW
CopySid
GetSidSubAuthority
InitializeSid
GetSidLengthRequired
GetTokenInformation
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
DecryptFileW
FileEncryptionStatusW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathAppendW
PathIsUNCW
PathStripPathW
PathFindExtensionW
VariantClear
VariantChangeType
VariantInit
CryptProtectData
CryptUnprotectData
??0CFileLockResolver@@AAE@KH@Z
??0CFileLockResolver@@QAE@ABV0@@Z
??0CFileLockResolver@@QAE@H@Z
??0CSecurityManager@@AAE@XZ
??1CFileLockResolver@@QAE@XZ
??1CSecurityManager@@AAE@XZ
??4CFileLockResolver@@QAEAAV0@ABV0@@Z
??4CSecurityManager@@QAEAAV0@ABV0@@Z
??_FCFileLockResolver@@QAEXXZ
?AskUser@CFileLockResolver@@AAEXH@Z
?Check@CSecurityManager@@SA_NPB_W@Z
?CheckAccess@@YA_NK@Z
?ClearProtection@@YA_NXZ
?Close@CFileLockResolver@@QAEXXZ
?ErrorHandler@CFileLockResolver@@CAKPB_WKPAX1@Z
?GetBMethods@@YAPBV_MethodBase@@XZ
?GetLockFilePath@CFileLockResolver@@CA?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z
?HandleError@CFileLockResolver@@AAEXPB_WKHI@Z
?IsProcessElevated@@YA_NPAX@Z
?IsProtected@CSecurityManager@@SA_NXZ
?IsWindowsNT@@YA_NXZ
?Protect@CSecurityManager@@SAXPB_W@Z
?Resolve@CFileLockResolver@@SAXPB_WAAVCStringArray@@@Z
?SetHandle@CFileLockResolver@@QAEXK@Z
?SetProtection@@YA_NXZ
?Unprotect@CSecurityManager@@SAXXZ
?loadLibrarySettings@@YA_NPAULibrarySettings@@@Z
?no_registry@@3_NA
?saveLibrarySettings@@YA_NPAULibrarySettings@@@Z
?setLibraryDefaults@@YAXPAULibrarySettings@@@Z
_eraserAddItem@12
_eraserClearItems@4
_eraserCompleted@8
_eraserCreateContext@4
_eraserCreateContextEx@16
_eraserDestroyContext@4
_eraserDispFlags@8
_eraserEnd@0
_eraserErrorString@16
_eraserErrorStringCount@8
_eraserFailed@8
_eraserFailedCount@8
_eraserFailedString@16
_eraserGetClusterSize@12
_eraserGetDataType@8
_eraserGetFreeDiskSpace@12
_eraserGetWindow@8
_eraserGetWindowMessage@8
_eraserInit@0
_eraserIsRunning@8
_eraserIsValidContext@4
_eraserProgGetCurrentDataString@12
_eraserProgGetCurrentPass@8
_eraserProgGetMessage@12
_eraserProgGetPasses@8
_eraserProgGetPercent@8
_eraserProgGetTimeLeft@8
_eraserProgGetTotalPercent@8
_eraserRemoveFile@8
_eraserRemoveFolder@12
_eraserSetDataType@8
_eraserSetErrorHandler@12
_eraserSetFinishAction@8
_eraserSetWindow@8
_eraserSetWindowMessage@8
_eraserShowOptions@8
_eraserShowReport@8
_eraserStart@4
_eraserStartSync@4
_eraserStatGetArea@8
_eraserStatGetTime@8
_eraserStatGetTips@8
_eraserStatGetWiped@8
_eraserStop@4
_eraserTerminated@8
_eraserTestContinueProcess@4
_eraserTestEnable@4
convEraseMethod
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ