Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Nancy-Drew-Mystery-of-the-Seven-Keys-DLM_1.0.exe
Resource
win7-20240220-en
Target
Nancy-Drew-Mystery-of-the-Seven-Keys-DLM_1.0.exe
Size
4.2MB
MD5
d609b0cef5249de468eceb55ad79ab7a
SHA1
9a25ad4cd434332299efc4bcd5ea7a0a4395d2b6
SHA256
93c90ad1b44c35f09a675f4fb2c6a1706dcd943f48321a29d2d3b5114d6b241c
SHA512
72309fc901cb465c24238688a0d344bfa9f4819f2baebfa645db862676d8e7440ad07c12bb19c754d81326b04cff21db4ba21b67a26e2ea30bf96fa25f871aad
SSDEEP
98304:fRQ9H9xBo5GLb5ej6FhlHqTED0HcbcozzQ3S4s:fRmH9xBdFeWWG0avs3S
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\actions-runner\_work\client\client\build\MinSizeRel\host.pdb
SymGetLineFromAddr64
SymFromAddr
SymSetOptions
SymCleanup
SymInitialize
ord169
ord137
ord141
ord88
SHGetKnownFolderPath
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHCreateItemFromParsingName
ShellExecuteExW
GetClassNameA
EnumWindows
OffsetRect
InflateRect
ScreenToClient
GetCursorPos
PostMessageW
DefWindowProcW
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
SetTimer
KillTimer
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
SetPropA
IsChild
GetPropA
GetSystemMetrics
DestroyIcon
SystemParametersInfoW
LoadIconW
LoadCursorW
GetCursor
SetCursor
MessageBoxW
AllowSetForegroundWindow
GetForegroundWindow
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
DestroyMenu
CreatePopupMenu
SetCursorPos
AttachThreadInput
ShutdownBlockReasonDestroy
ShutdownBlockReasonCreate
EnumDisplayDevicesW
GetWindowThreadProcessId
GetClassNameW
GetShellWindow
GetWindowTextW
GetKeyState
IsWindow
GetMonitorInfoW
MonitorFromWindow
GetWindowRect
GetPropW
EndPaint
BeginPaint
ReleaseDC
GetDC
SetForegroundWindow
TrackPopupMenu
ReleaseCapture
SetCapture
GetClientRect
GetWindowLongW
SetWindowLongW
InvalidateRect
SetWindowTextW
GetDesktopWindow
CloseDesktop
CloseWindowStation
GetThreadDesktop
GetProcessWindowStation
CreateWindowStationW
SetProcessWindowStation
CreateDesktopW
GetUserObjectInformationW
TrackMouseEvent
SendMessageW
SendMessageTimeoutW
ShowWindow
UpdateLayeredWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
IsWindowVisible
IsIconic
IsZoomed
GetAsyncKeyState
GetCapture
AdjustWindowRectEx
BCryptEncrypt
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptImportKey
BCryptGenRandom
BCryptDestroyHash
BCryptDuplicateHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptDestroyKey
BCryptDecrypt
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CryptStringToBinaryA
CertFreeCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertCreateCertificateContext
PFXImportCertStore
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CertGetNameStringA
CryptQueryObject
ImageList_Destroy
ImageList_GetIcon
ImageList_Add
ImageList_Create
SymSetSearchPathW
SymGetSearchPathW
DwmExtendFrameIntoClientArea
DwmDefWindowProc
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipSaveImageToFile
GdipDisposeImage
GdipLoadImageFromStream
GdiplusShutdown
GdiplusStartup
GetAdaptersAddresses
GetExtendedTcpTable
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
GetExitCodeThread
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwind
InitializeSListHead
GetStartupInfoW
UnhandledExceptionFilter
VerifyVersionInfoW
VerSetConditionMask
SleepEx
WaitForSingleObjectEx
MoveFileExA
FormatMessageW
GetSystemDirectoryA
InitializeCriticalSectionAndSpinCount
ExitProcess
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
ExitThread
FreeLibraryAndExitThread
ReadConsoleW
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
HeapReAlloc
HeapSize
CreateEventA
GetModuleHandleW
SetEnvironmentVariableW
GetCommandLineW
RtlCaptureContext
CreateFileW
CloseHandle
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
GetCurrentProcess
CreateThread
GetCurrentThreadId
TerminateThread
GetProcessId
VirtualQueryEx
FreeLibrary
GetProcAddress
LoadLibraryW
WriteFile
DuplicateHandle
GetLastError
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
SetEvent
ResetEvent
WaitForMultipleObjects
GetCurrentProcessId
DeleteFileW
DecodePointer
RaiseException
GlobalAlloc
GlobalFree
CompareStringW
CreateIoCompletionPort
CreateEventW
SetLastError
GetQueuedCompletionStatus
UnregisterWait
RegisterWaitForSingleObject
TerminateJobObject
PostQueuedCompletionStatus
GetModuleHandleExW
SetInformationJobObject
TerminateProcess
GetUserDefaultLangID
GetUserDefaultLCID
GetUserDefaultLocaleName
EnumSystemLocalesEx
HeapDestroy
GetTickCount
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
UnregisterWaitEx
GetCurrentThread
Sleep
IsDebuggerPresent
IsWow64Process
GetThreadId
SetThreadPriority
GetThreadPriority
GetFileType
SetHandleInformation
GetModuleHandleA
HeapSetInformation
SetProcessDEPPolicy
VirtualAllocEx
GetVersionExW
GetProductInfo
GetNativeSystemInfo
LocalFree
AssignProcessToJobObject
WriteProcessMemory
CreateFileMappingW
MapViewOfFile
ReadProcessMemory
GetCurrentProcessorNumber
SetThreadAffinityMask
VirtualFree
GetProcessHeaps
AcquireSRWLockExclusive
GetSystemTimeAsFileTime
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleFileNameW
GetCurrentDirectoryW
GetLocalTime
OutputDebugStringA
FormatMessageA
CreateNamedPipeW
CreateJobObjectW
QueryInformationJobObject
VirtualProtectEx
ExpandEnvironmentStringsW
DeleteProcThreadAttributeList
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
CreateMutexW
UnmapViewOfFile
GetFileAttributesW
QueryDosDeviceW
GetLongPathNameW
VirtualFreeEx
GetProcessHandleCount
TlsGetValue
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
VirtualAlloc
OpenProcess
GetProcessTimes
GetExitCodeProcess
LoadLibraryExW
lstrlenW
DebugBreak
FindResourceW
SizeofResource
LoadResource
LockResource
TlsAlloc
TlsFree
TlsSetValue
GlobalMemoryStatusEx
SetFilePointerEx
ReadFile
GetFileSizeEx
SetEndOfFile
SetFileTime
GetFileInformationByHandle
SetFileInformationByHandle
FlushFileBuffers
RtlCaptureStackBackTrace
CreateRemoteThread
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
CreateDirectoryW
GetTempPathW
GetFileAttributesExW
SetCurrentDirectoryW
GetSystemInfo
IsValidCodePage
WideCharToMultiByte
MultiByteToWideChar
VirtualQuery
FindClose
FindNextFileW
FindFirstFileExW
GetWindowsDirectoryW
GetSystemDirectoryW
CloseThreadpoolWork
CloseThreadpool
CreateThreadpool
SetThreadpoolThreadMinimum
SetThreadpoolThreadMaximum
CreateThreadpoolWork
SubmitThreadpoolWork
GetEnvironmentVariableW
InitializeConditionVariable
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
LoadLibraryExA
OutputDebugStringW
GetProcessHeap
HeapFree
GetStdHandle
CreateFileA
HeapAlloc
DeviceIoControl
CreateProcessW
LocalAlloc
SetThreadExecutionState
QueryFullProcessImageNameW
SetDllDirectoryA
CreateSymbolicLinkW
AllocConsole
FreeConsole
SetConsoleCtrlHandler
SetConsoleTitleW
K32GetModuleFileNameExW
K32GetProcessImageFileNameW
FindFirstFileW
GetDiskFreeSpaceW
GetOverlappedResult
SwitchToThread
FreeResource
CopyFileExW
MoveFileWithProgressW
GetFileInformationByHandleEx
GetLocaleInfoEx
MulDiv
GetTickCount64
IsProcessorFeaturePresent
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
CreatePipe
ConnectNamedPipe
DisconnectNamedPipe
PeekNamedPipe
GetNamedPipeClientProcessId
GetNamedPipeServerProcessId
GetEnvironmentVariableA
FlsAlloc
FlsSetValue
FlsFree
GetLargePageMinimum
LoadLibraryA
GetNumaHighestNodeNumber
GetNumaNodeProcessorMask
WriteConsoleA
GetConsoleScreenBufferInfo
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
InitializeCriticalSectionEx
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
timeEndPeriod
timeGetTime
timeBeginPeriod
EqualSid
ConvertSidToStringSidW
ConvertStringSidToSidW
CreateWellKnownSid
SetKernelObjectSecurity
GetKernelObjectSecurity
DuplicateTokenEx
MapGenericMask
AccessCheck
GetSecurityDescriptorSacl
OpenProcessToken
GetAce
FreeSid
ImpersonateLoggedOnUser
GetNamedSecurityInfoW
GetSecurityInfo
SetSecurityInfo
BuildTrusteeWithSidW
SetEntriesInAclW
InitializeAcl
AddMandatoryAce
GetSecurityDescriptorDacl
SystemFunction036
RegCreateKeyExW
RegQueryValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
DuplicateToken
GetTokenInformation
CreateRestrictedToken
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegGetValueW
AllocateAndInitializeSid
GetFileSecurityW
SetFileSecurityW
LookupPrivilegeValueA
GetUserNameW
CreateProcessWithTokenW
InitiateSystemShutdownExW
CredWriteW
CredReadW
CredDeleteW
CredFree
RegDeleteKeyW
RegOpenKeyExA
RegSetKeySecurity
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
SetTokenInformation
SetThreadToken
CreateProcessAsUserW
RevertToSelf
RegDisablePredefinedCache
RegOpenKeyExW
RegCloseKey
InitializeSid
GetSidSubAuthority
IsValidSid
GetLengthSid
WinHttpOpen
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpGetProxyForUrl
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
FindCloseUrlCache
InternetQueryOptionW
DeleteUrlCacheEntryW
closesocket
ioctlsocket
WSAStartup
WSACleanup
WSAGetLastError
bind
getsockname
htons
listen
ntohs
setsockopt
shutdown
socket
WSAGetOverlappedResult
WSASetLastError
WSACreateEvent
WSACloseEvent
inet_ntop
inet_pton
getnameinfo
freeaddrinfo
getaddrinfo
gethostname
send
select
recv
ntohl
htonl
getsockopt
connect
accept
__WSAFDIsSet
WSASocketW
WSASend
WSARecv
WSAIoctl
CreateCompatibleDC
GetDeviceCaps
SetPixelFormat
DeleteDC
SelectObject
CreateDIBSection
GetObjectW
ChoosePixelFormat
BitBlt
DeleteObject
CLSIDFromProgID
CreateStreamOnHGlobal
CoCreateGuid
CoSetProxyBlanket
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
OleUninitialize
OleInitialize
SysFreeString
SysAllocString
SysStringLen
VariantInit
VariantClear
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayGetElement
SafeArrayGetDim
GetOpenFileNameW
GetHandleVerifier
IsSandboxedProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ