Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
7f06dd764050d5b935ac09646c0a3b9f4024d9dea0190933931234da6b3a94b8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7f06dd764050d5b935ac09646c0a3b9f4024d9dea0190933931234da6b3a94b8.exe
Resource
win10v2004-20240419-en
Target
7f06dd764050d5b935ac09646c0a3b9f4024d9dea0190933931234da6b3a94b8
Size
147KB
MD5
6bcc66e6558242361a8686f62a4fd994
SHA1
a5f7251b9789248f0bf31dd23b73445740a3218e
SHA256
7f06dd764050d5b935ac09646c0a3b9f4024d9dea0190933931234da6b3a94b8
SHA512
5b7e3512700861c4ad92b8cba120bc35d93f9ec8d1663ffb99f0beb5d5a012d62212530e7bfe80eb71c424ffbee83a1ffa3fa5638cadc5f725952d8e5997f492
SSDEEP
3072:sYJSHwKOLglbQ8LJ1CAvaaHygtDzb2sg0c6AYtw9wxD:sYu1Q8Lbd9lXaJ0l7
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\Projects\21yasuo\pcbussi\Release\environment.pdb
WTSQueryUserToken
WTSEnumerateSessionsA
WTSFreeMemory
DestroyEnvironmentBlock
CreateEnvironmentBlock
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
ord2383
ord1173
ord13051
ord5679
ord545
ord11936
ord2884
ord1980
ord12259
ord1140
ord2880
ord12260
ord498
ord3005
ord305
ord5898
ord316
ord300
ord310
ord2387
ord306
ord1044
ord1526
ord1529
ord14520
ord1696
ord1692
ord2326
ord4807
ord2992
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateProcessA
lstrcmpiA
WTSGetActiveConsoleSessionId
LocalFree
GetLogicalDriveStringsA
CloseHandle
lstrcpyA
Process32Next
GetModuleHandleExA
GetSystemTimeAsFileTime
CreateToolhelp32Snapshot
OpenProcess
lstrcatA
WaitForSingleObject
CreateMutexA
lstrlenA
QueryDosDeviceA
GetCommandLineW
Process32First
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
GetCurrentProcessId
GetLastError
MultiByteToWideChar
InitializeCriticalSectionEx
InitializeSListHead
Sleep
OutputDebugStringW
K32GetProcessImageFileNameA
GetTokenInformation
CreateProcessAsUserA
DuplicateTokenEx
CommandLineToArgvW
PathFileExistsA
_except_handler4_common
memset
memcpy
__std_exception_destroy
memmove
__CxxFrameHandler3
__std_terminate
memchr
__std_exception_copy
_CxxThrowException
__current_exception
__current_exception_context
isspace
isalnum
tolower
exit
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_get_initial_narrow_environment
_register_onexit_function
_initialize_onexit_table
_exit
_configure_narrow_argv
_initterm
__p___argc
__p___argv
_invalid_parameter_noinfo_noreturn
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_controlfp_s
terminate
_initialize_narrow_environment
_callnewh
realloc
free
_set_new_mode
calloc
malloc
fgetc
fputc
_close
fwrite
fgetpos
fclose
ungetc
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
setvbuf
__p__commode
__stdio_common_vsscanf
_set_fmode
fflush
_sopen_dispatch
_splitpath
_fullpath
_access
_unlock_file
_lock_file
remove
_mbsnbicmp
_time64
_mktime64
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ