Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
DTS.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DTS.dll
Resource
win10v2004-20240508-en
Target
DTS.dll
Size
1.4MB
MD5
aa8246ad447d07afac30c6c61fb7e824
SHA1
4c87663a32797997258662a30bc630f38d7158cf
SHA256
7abc021a9dd8cd0a917578c22d5b4e429303400cafb272ca3daf8266c0b83494
SHA512
62399e2d7397be3e4db9617e107afb6f9729eecff3dcc0332f07adfd791bcbd581806a2bfb12bee202c57e140d394f380423f5966991545f4b967348d2515a57
SSDEEP
24576:eisbNyGdonx2ApBcuzNGPLcXPuAw9XdV2FnJ:ezb7donBDzNGzcGAOdV2/
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DTS.pdb
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_crt_debugger_hook
_malloc_crt
_encode_pointer
wcstoul
wcstok
wcscat_s
__doserrno
_beginthreadex
_wcsicmp
_wtol
_wgetenv
memmove
realloc
_snwprintf_s
malloc
swprintf_s
swscanf_s
wcstok_s
wcscspn
_wcsnicmp
_localtime64_s
_time64
wcsstr
calloc
wcsrchr
_ultow_s
_wcsupr
wcsncpy_s
wcschr
memmove_s
??0exception@std@@QAE@ABQBDH@Z
_recalloc
wcsncmp
wcscpy_s
_vsnwprintf
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??3@YAXPAX@Z
_wcsdup
memcpy
wcsncat_s
_itow
_i64tow
_ui64tow
_gcvt
iswspace
_wcstoi64
_wcstoui64
wcstod
wcspbrk
_ultow
__CxxFrameHandler3
_CxxThrowException
memset
??0bad_cast@std@@QAE@ABV01@@Z
_purecall
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
memcpy_s
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??_U@YAPAXI@Z
__RTDynamicCast
??_V@YAXPAX@Z
free
_encoded_null
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
?_Incref@facet@locale@std@@QAEXXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?_Register@facet@locale@std@@QAEXXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?widen@?$ctype@G@std@@QBEGD@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
_Nan
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHPBGH@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
_Inf
ord23
ord31
ord58
ord32
ord61
ord30
ord64
ord18
ord22
ord13
ord14
ord12
ord15
GetLongPathNameW
GetFileType
ReleaseSemaphore
GetCurrentDirectoryW
LocalAlloc
SetEnvironmentVariableW
GetEnvironmentVariableW
HeapReAlloc
LoadLibraryA
HeapDestroy
CreateSemaphoreW
HeapSize
GetVersionExA
GetLocaleInfoA
GetACP
WaitForSingleObjectEx
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
Sleep
InterlockedExchange
OpenEventW
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryExW
FormatMessageW
SystemTimeToFileTime
FreeLibrary
ReadFile
FindNextFileW
FindFirstFileW
QueueUserWorkItem
FindClose
SetLastError
GetCurrentThreadId
DuplicateHandle
ReleaseMutex
GlobalUnlock
GlobalLock
WideCharToMultiByte
CreateFileW
MoveFileExW
GetTempFileNameW
GetFullPathNameW
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
HeapAlloc
HeapFree
GetProcessHeap
SetPriorityClass
GetPriorityClass
GlobalFree
LocalFree
CreateMutexW
GlobalAlloc
GetCurrentProcess
GetCurrentThread
GetUserDefaultLCID
DeleteFileW
ResetEvent
GetSystemInfo
CloseHandle
CreateEventW
SetErrorMode
SetEvent
WaitForSingleObject
LoadLibraryW
GetDateFormatW
GetTimeFormatW
GetProcAddress
GetLocalTime
CompareStringW
GetModuleHandleW
GetUserDefaultUILanguage
GetStringTypeW
IsDebuggerPresent
RaiseException
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
InitializeCriticalSection
WriteFile
GetSystemTime
SystemTimeToTzSpecificLocalTime
lstrcmpW
lstrcmpiW
GetLastError
GetComputerNameW
GetVersionExW
GetThreadLocale
SetThreadLocale
lstrlenA
MultiByteToWideChar
GetTickCount
FileTimeToSystemTime
CharLowerBuffW
RegisterWindowMessageW
PeekMessageW
GetMessageW
DispatchMessageW
PostThreadMessageW
UnregisterClassA
RegOpenKeyExW
RegQueryValueExW
CryptAcquireContextW
CryptExportKey
CryptDestroyKey
CryptReleaseContext
OpenThreadToken
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityInfo
EqualSid
IsValidSid
GetLengthSid
RegCloseKey
DeregisterEventSource
RegOpenCurrentUser
ReportEventW
RegisterEventSourceW
LookupAccountSidW
RegEnumValueW
CopySid
VariantTimeToSystemTime
SafeArrayGetElement
SafeArrayGetLBound
VariantChangeTypeEx
SafeArrayPutElement
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysStringByteLen
SysAllocStringByteLen
VariantInit
SafeArrayGetDim
VarDateFromUdate
GetErrorInfo
VariantClear
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayCopy
SafeArrayGetVartype
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VarBstrCmp
VariantCopy
SafeArrayCreate
CreateErrorInfo
SetErrorInfo
SafeArrayGetUBound
SystemTimeToVariantTime
VarBstrCat
SafeArrayGetElemsize
VarCmp
SafeArrayRedim
VarUdateFromDate
SafeArrayLock
SafeArrayUnlock
StringFromGUID2
CoTaskMemRealloc
CoWaitForMultipleHandles
CoUninitialize
CoInitializeEx
CoCreateInstanceEx
CoTaskMemFree
StringFromCLSID
GetHGlobalFromILockBytes
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
StgOpenStorage
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoQueryProxyBlanket
IIDFromString
ProgIDFromCLSID
GetHGlobalFromStream
CoSetProxyBlanket
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
?FormatMessageWithVaList@CErrorHelper@@SAJPAKPBXKPAPAGPAD@Z
?TryGetErrorDescription@CErrorHelper@@SAJJPAPAG@Z
?GetErrorDescription@CErrorHelper@@SAJJPAPAG@Z
?FormatMessageW@CErrorHelper@@SAJPAKPBXKPAPAGZZ
CryptUnprotectData
CryptProtectData
CertFreeCertificateChain
CertGetEnhancedKeyUsage
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CryptImportPublicKeyInfo
CertGetCertificateContextProperty
CertCloseStore
CertFindCertificateInStore
CertOpenStore
CertDuplicateCertificateContext
CertCreateCertificateContext
CertFreeCertificateContext
BIDSSKUIsWKGorUnder
DTSGetProductLevel
DTSSKUIsWKGorUnder
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EngineSKUIsWKGorUnder
TOOLSSKUIsWKGorUnder
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ