Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
BstkC.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
BstkC.dll
Resource
win10v2004-20240426-en
Target
BstkC.dll
Size
2.6MB
MD5
366b8d87ac34e8edfc4ecbcddc937626
SHA1
4ce34fa5bf977afc9d0eb29ef22a9bb1a3ce28f9
SHA256
c7c78c36cd724010a83cefec959745cf375939ee2abd56774a592c79e592897d
SHA512
afec8e48d3ceb684482527879dbc667539119a1a10f14b1622e6a7541bcc7a27f718345ccf2cb981f3b2837a9440e646de2c895d3052b2458a339fb8471d2a90
SSDEEP
49152:ugKOFyiuTJGdeRft+wygTyi/5zT47/j0U9G6IRf/4eCT7dHJwc:ugKOkixwyoG74U9GS
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\virtualbox\out\win.amd64\release\obj\BstkC\BstkC.pdb
_initterm_e
free
_malloc_crt
__crt_debugger_hook
_encoded_null
_amsg_exit
__CppXcptFilter
_initterm
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__C_specific_handler
__RTDynamicCast
strrchr
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
strncmp
strpbrk
??0exception@std@@QEAA@AEBQEBDH@Z
__RTtypeid
_purecall
strchr
memset
memmove
??0exception@std@@QEAA@AEBV01@@Z
_CxxThrowException
??2@YAPEAX_K@Z
__CxxFrameHandler3
??3@YAXPEAX@Z
??1exception@std@@UEAA@XZ
?what@exception@std@@UEBAPEBDXZ
??0exception@std@@QEAA@AEBQEBD@Z
_setjmp
memcpy
_vsnprintf
malloc
_snprintf
abort
fwrite
fflush
longjmp
fprintf
__iob_func
?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z
??1_Container_base12@std@@QEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
RTUtf16GetCpExInternal
RTStrGetCpExInternal
g_aRTUniUpperRanges
g_aRTUniLowerRanges
RTStrNLen
RTStrToUtf16ExTag
RTStrCalcUtf16LenEx
RTPathStripFilename
RTUtf16ToUtf8ExTag
RTProcGetExecutablePath
RTSystemQueryAvailableRam
RTSystemQueryTotalRam
RTSystemQueryOSInfo
RTLogSetBuffering
RTLogRelSetDefaultInstance
RTLogFlush
RTLogSetGroupLimit
RTLogCreateEx
RTCritSectRwGetWriteRecursion
RTCritSectRwLeaveShared
RTCritSectRwEnterShared
RTCritSectRwLeaveExcl
RTCritSectRwEnterExcl
RTCritSectRwIsWriteOwner
RTCritSectRwDelete
RTCritSectRwInitEx
RTStrAllocTag
RTTcpServerShutdown
RTFileSetMode
RTFileQueryInfo
RTDirRemove
RTCritSectInit
RTCritSectDelete
RTMemReallocTag
RTMemFree
RTMemAllocTag
?c_str@RTCString@@QEBAPEBDXZ
??1RTCString@@UEAA@XZ
?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z
RTSemEventSignal
RTSemEventWait
??4RTCString@@QEAAAEAV0@AEBV0@@Z
RTSemEventDestroy
RTThreadSleep
RTCritSectLeave
RTCritSectEnter
??0RTCString@@QEAA@AEBV0@@Z
RTSemEventCreate
RTTimeMilliTS
?cleanup@RTCString@@IEAAXXZ
??_7RTCString@@6B@
RTStrPrintf
RTSha512FromString
?startsWith@RTCString@@QEBA_NAEBV1@W4CaseSensitivity@1@@Z
??0RTCString@@QEAA@PEBD@Z
??4RTCString@@QEAAAEAV0@PEBD@Z
RTAssertShouldPanic
RTAssertMsg2Weak
RTAssertMsg1Weak
RTSha512ToString
RTSha512
RTSemEventMultiReset
RTSemEventMultiCreate
RTSemEventMultiSignal
RTSemEventMultiWait
RTUuidClear
RTUuidCreate
RTSemEventMultiDestroy
RTMemSaferScramble
RTMemSaferAllocZExTag
RTMemSaferFree
RTMemSaferUnscramble
??MRTCString@@QEBA_NAEBV0@@Z
?compare@RTCString@@QEBAHAEBV1@W4CaseSensitivity@1@@Z
RTPathReal
RTPathExists
RTPathCompare
RTPathAbsEx
RTThreadSelf
RTThreadCreate
RTLogLoggerEx
RTLogRelGetDefaultInstanceEx
RTTlsGet
RTStrFree
RTUuidFromUtf16
RTUuidToUtf16
RTLdrClose
RTBldCfgCompiler
RTBldCfgTargetArch
RTPathQueryInfo
RTStrCat
RTLdrGetSuff
RTPathAppend
RTPathJoin
RTBldCfgTargetDotArch
RTStrCopy
RTStrStripR
RTProcWait
RTPipeReadBlocking
RTPipeClose
RTProcCreateEx
RTPipeCreate
RTPathAppPrivateArch
RTUuidFromStr
RTLdrGetSymbol
SUPR3HardenedLdrLoadPlugIn
SUPR3HardenedVerifyPlugIn
RTStrICmp
SUPR3HardenedVerifyDir
?printf@RTCString@@QEAAAEAV1@PEBDZZ
RTPathQueryInfoEx
RTFileReadAllFree
RTFileReadAllEx
RTStrCmp
SUPR3HardenedVerifyInit
RTBldCfgRevision
RTBldCfgVersion
RTDirClose
RTDirReadEx
RTDirOpen
RTPathAppPrivateNoArch
RTPathAppPrivateArchTop
??0RTCString@@QEAA@PEBD_K@Z
RTFileSeek
?append@RTCString@@QEAAAEAV1@AEBV1@@Z
?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAPEBD0@Z
?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAI0@Z
?append@RTCString@@QEAAAEAV1@PEBD@Z
?getValue@Node@xml@@QEBAPEBDXZ
?findChildElementNS@ElementNode@xml@@QEBAPEBV12@PEBD0@Z
?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAVRTCString@@0@Z
?getName@Node@xml@@QEBAPEBDXZ
?getRootElement@Document@xml@@QEAAPEAVElementNode@2@XZ
??1XmlError@xml@@UEAA@XZ
??_7RTCError@@6B@
?what@RTCError@@UEBAPEBDXZ
??1Document@xml@@QEAA@XZ
??1XmlFileParser@xml@@QEAA@XZ
?read@XmlFileParser@xml@@QEAAXAEBVRTCString@@AEAVDocument@2@@Z
??0XmlFileParser@xml@@QEAA@XZ
??0Document@xml@@QEAA@XZ
RTMemTmpFree
RTMemTmpAllocTag
RTPathFilename
??0RTCString@@QEAA@XZ
RTMemAllocZTag
RTUuidCompare2Strs
RTMemDupTag
RTReqQueueProcess
RTReqRelease
RTReqQueueCall
RTReqQueueDestroy
RTReqQueueCallEx
RTReqQueueCreate
RTBase64Encode
RTBase64EncodedLength
RTUuidToStr
RTStrNCmp
RTUtf16Cmp
RTUtf16Len
RTUuidCompare
ASMAtomicCmpXchgU8
RTStrDupNTag
RTStrNICmp
RTDirFlush
RTFileDelete
RTFileRename
RTDirCreateFullPath
RTDirExists
?equals@RTCString@@QEBA_NAEBV1@@Z
RTMemWipeThoroughly
RTBase64Decode
RTBase64DecodedSize
??9RTCString@@QEBA_NPEBD@Z
RTStrToUInt64
?reserve@RTCString@@QEAAX_K@Z
?contains@RTCString@@QEBA_NAEBV1@W4CaseSensitivity@1@@Z
RTStrPurgeEncoding
??1RTCError@@UEAA@XZ
??0RTCError@@QEAA@AEBVRTCString@@@Z
??0RTCError@@QEAA@AEBV0@@Z
RTSystemQueryDmiString
?compare@RTCString@@QEBAHPEBDW4CaseSensitivity@1@@Z
?npos@RTCString@@2_KB
?find@RTCString@@QEBA_KPEBD_K@Z
RTStrToUInt16
?isEmpty@RTCString@@QEBA_NXZ
?toUInt32@RTCString@@QEBAIXZ
?length@RTCString@@QEBA_KXZ
?substr@RTCString@@QEBA?AV1@_K0@Z
RTBldCfgRevisionStr
RTUtf16ToUtf8Tag
RTMemTmpAllocZTag
RTStrToUInt64Full
RTFsTypeName
RTFsQueryType
?isNotEmpty@RTCString@@QEBA_NXZ
RTPathEnsureTrailingSeparator
RTPathUserHome
??8RTCString@@QEBA_NPEBD@Z
ASMAtomicXchgU8
RTTcpRead
RTStrStrip
RTStrToInt32Full
RTTcpSgWriteL
RTTcpSelectOne
RTTcpWrite
RTPathTemp
RTSocketRelease
RTSocketRetain
?append@RTCString@@QEAAAEAV1@D@Z
RTTcpSetSendCoalescing
RTTcpClientConnect
RTTimerLRDestroy
RTTcpGetPeerAddress
RTTcpServerListen
RTTimerLRStart
RTTimerLRCreateEx
RTTcpServerDestroy
RTRandU32Ex
RTTcpServerCreateEx
RTTcpClientClose
RTThreadUserSignal
RTThreadWait
SUPR3HardenedLdrLoadAppPriv
RTPathHasPath
RTThreadUserWait
RTStrNLenEx
RTStrToUInt32
RTTimeNow
RTSemXRoadsCreate
RTSemXRoadsDestroy
RTSemXRoadsNSEnter
RTSemXRoadsNSLeave
RTSemXRoadsEWEnter
RTSemXRoadsEWLeave
RTStrToUInt32Full
RTStrStr
?equals@RTCString@@QEBA_NPEBD@Z
RTTimerLRChangeInterval
RTTimerLRStop
?count@RTCString@@QEBA_KD@Z
RTTimeNanoTS
RTTimerLRCreate
RTStrFormatV
?jolt@RTCString@@QEAAXXZ
?reserveNoThrow@RTCString@@QEAAH_K@Z
RTLogGetFlags
RTLogGetDefaultInstance
RTLogGetGroupSettings
RTLogGetDestinations
RTLogRelGetDefaultInstance
RTProcSelf
RTLdrGetSystemSymbol
RTStrDupTag
RTStrPurgeComplementSet
RTTimeSpecToString
RTEnvDestroy
RTEnvApplyChanges
RTEnvCreate
RTEnvCreateChangeRecord
RTEnvClone
RTEnvIsChangeRecord
RTIsoFsGetFileInfo
RTFileClose
RTFileRead
RTThreadYield
RTFileGetSize
RTFileOpen
RTFileExists
RTFileWrite
RTIsoFsClose
??H@YA?BVRTCString@@AEBV0@PEBD@Z
?findReplace@RTCString@@QEAAXDD@Z
RTIsoFsOpen
RTStrVersionCompare
RTStrToInt64
RTStrToInt16
RTEnvCountEx
RTEnvQueryUtf8Block
RTEnvFreeUtf8Block
RTGetOptArgvToString
RTEnvGetByIndexRawEx
RTEnvReset
RTEnvGetEx
RTEnvExistEx
RTEnvSetEx
RTEnvUnsetEx
RTEnvPutEx
?split@RTCString@@QEBA?AV?$RTCList@VRTCString@@PEAV1@@@AEBV1@W4SplitMode@1@@Z
RTStrIsValidEncoding
RTPathChangeToDosSlashes
RTPathJoinA
RTStrValidateEncodingEx
RTStrCurrentCPToUtf8Tag
RTAvlULInsert
RTAvlULRemove
RTAvlULGet
RTR3InitDll
RTPathRealDup
RTDirRead
RTPathStripTrailingSlash
RTUriFilePath
??H@YA?BVRTCString@@AEBV0@0@Z
RTUriFileCreate
RTDirCreateUniqueNumbered
CloseHandle
WaitForSingleObject
SetEvent
ReleaseMutex
CreateEventW
OpenMutexW
CreateFileW
DeviceIoControl
GetLastError
WideCharToMultiByte
DisableThreadLibraryCalls
EncodePointer
DecodePointer
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree
GetLocalTime
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoCreateFreeThreadedMarshaler
StringFromIID
CoUninitialize
SysAllocStringLen
SafeArrayGetIID
VariantClear
SysAllocStringByteLen
SafeArrayGetVartype
SafeArrayCreateEx
SysAllocString
SetErrorInfo
GetErrorInfo
SysFreeString
LoadRegTypeLi
SafeArrayRedim
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VBoxDriversRegister
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ