Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
cd2453f6d590448037a874f0f92abc7fa6682fb55436f563ec1ebfde6bc0af35.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd2453f6d590448037a874f0f92abc7fa6682fb55436f563ec1ebfde6bc0af35.dll
Resource
win10v2004-20240426-en
Target
cd2453f6d590448037a874f0f92abc7fa6682fb55436f563ec1ebfde6bc0af35
Size
198KB
MD5
17e68dac1f47c723f52d9877a0fee40b
SHA1
59b69a2559b1c86d4069763c3a9224715bcab763
SHA256
cd2453f6d590448037a874f0f92abc7fa6682fb55436f563ec1ebfde6bc0af35
SHA512
be4c3b43731226254f01e9afb735cceaa3c39cd5654b83d7944d86fd3eb8d32bef78e412bbda59f2d7b4eb88923618641609b1d19558ccdba1870462fe360404
SSDEEP
6144:bhfw6L8AWCCY1Dr+x25eb+XgXr0Lqri5WJ:bhfoCCuDr+5+XgX4OrXJ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\Dev_src\ndrive_client\branches\Korea\RB-14282.130812.1\output\bin\release\NDriveUpdateAgent.pdb
LockResource
CloseHandle
DeleteFileW
lstrcpyW
WriteFile
Sleep
lstrcpynW
FlushFileBuffers
CreateMutexW
SetFilePointer
WaitForSingleObject
GetTickCount
ReleaseMutex
GetSystemTime
lstrlenA
CreateDirectoryW
InterlockedExchange
OpenEventW
TerminateProcess
lstrcmpiW
WriteConsoleW
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
FindClose
GetProcAddress
SetLastError
lstrlenW
MultiByteToWideChar
CreateFileW
ReadFile
SizeofResource
LoadLibraryW
WideCharToMultiByte
GetModuleHandleW
LoadResource
FreeLibrary
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
SetEndOfFile
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
RtlUnwind
GetCPInfo
GetCommandLineA
GetSystemTimeAsFileTime
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
InitializeCriticalSectionAndSpinCount
RaiseException
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
FindResourceExW
FindFirstFileW
GetFullPathNameW
GetCurrentThreadId
GetLastError
GetModuleFileNameW
OutputDebugStringW
GetCurrentProcess
DecodePointer
EncodePointer
lstrcmpA
LocalAlloc
LocalFree
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
MessageBoxW
PostMessageW
FindWindowExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
CoTaskMemFree
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
HttpSendRequestW
InternetSetOptionW
HttpQueryInfoW
HttpOpenRequestW
InternetErrorDlg
PathFileExistsW
PathAppendW
PathFindFileNameW
CryptDecodeObject
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
CryptMsgClose
WinVerifyTrust
Request
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ