Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
7787a284f0ab3b5d8cf28b01031d1c092a5b6c771b4adce4a220943e91afccae.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7787a284f0ab3b5d8cf28b01031d1c092a5b6c771b4adce4a220943e91afccae.dll
Resource
win10v2004-20240508-en
Target
7787a284f0ab3b5d8cf28b01031d1c092a5b6c771b4adce4a220943e91afccae
Size
359KB
MD5
c2f26a4c01f5b9055c7c9b65d321904e
SHA1
03d58abce9ac4e0e4ec0bc4bcdc94a13e16a92db
SHA256
7787a284f0ab3b5d8cf28b01031d1c092a5b6c771b4adce4a220943e91afccae
SHA512
f69999858649a8afcd4f1cf2498d751d55281b9271f95e3393729609a26c4cf66842821d7a0b4b7949952142a62c3827b484d0cb335d852f4620bbaf21e42e3b
SSDEEP
6144:7r/PtqDRmSQFWvdjVKy1PVdtx5ZO9Q1Wfm:7r/4DRvVtO9Qmm
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CertCloseStore
CertOpenStore
CertFreeCertificateContext
CertCreateCertificateContext
CertDeleteCertificateFromStore
CryptMsgClose
CryptMsgGetParam
CryptMsgUpdate
CryptMsgOpenToDecode
CryptEncryptMessage
CertOpenSystemStoreA
CryptDecryptMessage
CryptAcquireCertificatePrivateKey
CertGetCertificateContextProperty
PFXExportCertStore
CertAddCertificateLinkToStore
CertGetCertificateChain
CertSetCertificateContextProperty
CertAddCertificateContextToStore
CertGetIntendedKeyUsage
CertNameToStrA
CertGetNameStringA
PFXImportCertStore
PFXVerifyPassword
PFXIsPFXBlob
CertDuplicateCertificateContext
CertVerifyTimeValidity
CryptSignAndEncodeCertificate
CryptExportPublicKeyInfo
CryptEncodeObject
CryptDecodeObject
CertEnumCertificatesInStore
GetAdaptersInfo
PathFileExistsA
CryptUIDlgViewContext
ord795
ord641
ord567
ord324
ord2302
ord800
ord2614
ord4224
ord3874
ord6199
ord2642
ord3876
ord3092
ord4710
ord2582
ord4402
ord3370
ord3640
ord693
ord6007
ord6907
ord3998
ord5861
ord6143
ord2976
ord6283
ord6282
ord926
ord1871
ord609
ord3663
ord543
ord803
ord663
ord348
ord537
ord656
ord3721
ord1176
ord1116
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4627
ord3402
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord3574
ord4396
ord2575
ord3610
ord3597
ord4425
ord5280
ord1775
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord1168
ord5683
ord5710
ord4278
ord4202
ord355
ord3499
ord1175
ord500
ord772
ord1601
ord2764
ord4277
ord941
ord939
ord924
ord922
ord535
ord541
ord4129
ord6877
ord6883
ord801
ord539
ord5860
ord6142
ord860
ord823
ord1131
ord2725
ord3953
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3584
ord3830
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2554
ord4486
ord6375
ord815
ord4274
ord825
ord540
ord858
ord861
ord5608
ord6467
ord4234
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
_except_handler3
printf
_mbslen
wcscmp
_unlink
srand
rand
strtok
toupper
memmove
fprintf
fwrite
fopen
_filelength
fclose
strstr
sprintf
strncat
strcat
wcslen
strtol
isalpha
isdigit
_mbsicmp
_mbscmp
strlen
memset
realloc
malloc
free
memcmp
_purecall
memcpy
__CxxFrameHandler
_itoa
_close
_read
_open
_write
wcscpy
FileTimeToSystemTime
GetTempPathA
GetSystemInfo
GetEnvironmentVariableA
GetWindowsDirectoryA
FormatMessageA
LocalFree
GetACP
GetVersionExA
GetLocalTime
SystemTimeToFileTime
GetFileAttributesA
CreateDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
lstrcatA
lstrcpyA
LoadLibraryA
FileTimeToLocalFileTime
HeapDestroy
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
CompareFileTime
GetTickCount
SetLastError
MapViewOfFile
CreateFileMappingA
HeapFree
GetProcessHeap
CloseHandle
UnmapViewOfFile
HeapAlloc
SetEvent
GetSystemTime
GetProcAddress
LocalAlloc
GetClassInfoExA
DestroyWindow
IsChild
GetFocus
SetFocus
GetParent
CharNextA
RegisterClassExA
IsWindow
DefWindowProcA
GetKeyState
PtInRect
UnionRect
ShowWindow
SetWindowLongA
wsprintfA
GetWindowLongA
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
ReleaseDC
GetDC
InvalidateRect
EndPaint
GetClientRect
BeginPaint
GetSystemMetrics
SendMessageA
EnableWindow
CreateWindowExA
LoadCursorA
CallWindowProcA
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
GetDeviceCaps
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateDCA
CryptDecrypt
CryptDestroyKey
CryptImportKey
CryptSetKeyParam
GetLengthSid
AllocateAndInitializeSid
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegEnumKeyA
CryptGenKey
CryptEnumProvidersA
CryptEncrypt
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
CryptExportKey
CryptGetUserKey
CryptReleaseContext
CryptAcquireContextA
CryptSignHashA
CryptSetHashParam
CryptCreateHash
RegQueryValueExA
RegCreateKeyA
InitializeAcl
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
OleLoadFromStream
CoCreateInstance
OleSaveToStream
CoTaskMemFree
CoTaskMemAlloc
CreateDataAdviseHolder
CoTaskMemRealloc
WriteClassStm
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CreateOleAdviseHolder
ord250
SysStringLen
LoadRegTypeLi
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
SysAllocStringLen
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_AcceptPKCS7@4
_CertDecryptPkcs7@8
_CertEncryptPkcs7@16
_ChangePfxPasswd@20
_ChangePfxPasswdEx@24
_CreatePKCS10@12
_CreatePKCS10Pair@12
_DeleteIECert@4
_ExportMobileFromIE@16
_ExportMobileFromPfx@20
_ExportPfxFromIE@20
_FireFoxCom@0
_GetCapiErrorCode@0
_GetCapiErrorMsg@0
_GetCertB64@0
_GetCertFinger@0
_GetCertIssuer@0
_GetCertKeyUsage@0
_GetCertNotAfter@0
_GetCertNotBefore@0
_GetCertSerial@0
_GetCertSubject@0
_GetCertSubjectCN@0
_GetCsrForEncrypt@0
_GetCsrForSign@0
_GetDLLVersion@0
_GetDllVersion@0
_GetErrorCode@0
_GetErrorMsg@0
_GetErrorMsgByIndex@4
_GetExportedPfxFileName@0
_GetExportedPfxFilePath@0
_GetIECertCommonName@4
_GetIECertCount@0
_GetIECertFinger@4
_GetIECertIssuer@4
_GetIECertNotAfter@4
_GetIECertNotBefore@4
_GetIECertSerial@4
_GetIECertSubject@4
_GetImportedPfxFileName@0
_GetImportedPfxFilePath@0
_GetMacAddress@0
_GetOSName@0
_GetPortEx@0
_GetServerAuth@0
_GetSignerPfxFileName@0
_GetSignerPfxFilePath@0
_GetUrl@0
_GetUserHomePath@0
_Hash@8
_HashFile@8
_ImportPfxToIE@20
_Java_com_Twca_TDCCCapiATLApplet_AcceptPKCS7@12
_Java_com_Twca_TDCCCapiATLApplet_CertDecryptPkcs7@16
_Java_com_Twca_TDCCCapiATLApplet_CertEncryptPkcs7@24
_Java_com_Twca_TDCCCapiATLApplet_ChangePfxPasswd@28
_Java_com_Twca_TDCCCapiATLApplet_ChangePfxPasswdEx@32
_Java_com_Twca_TDCCCapiATLApplet_CreatePKCS10@20
_Java_com_Twca_TDCCCapiATLApplet_CreatePKCS10Pair@20
_Java_com_Twca_TDCCCapiATLApplet_DeleteIECert@12
_Java_com_Twca_TDCCCapiATLApplet_ExportMobileFromIE@24
_Java_com_Twca_TDCCCapiATLApplet_ExportMobileFromPfx@28
_Java_com_Twca_TDCCCapiATLApplet_ExportPfxFromIE@28
_Java_com_Twca_TDCCCapiATLApplet_GetCapiErrorCode@8
_Java_com_Twca_TDCCCapiATLApplet_GetCapiErrorMsg@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertB64@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertFinger@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertIssuer@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertKeyUsage@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertNotAfter@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertNotBefore@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertSerial@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertSubject@8
_Java_com_Twca_TDCCCapiATLApplet_GetCertSubjectCN@8
_Java_com_Twca_TDCCCapiATLApplet_GetCsrForEncrypt@8
_Java_com_Twca_TDCCCapiATLApplet_GetCsrForSign@8
_Java_com_Twca_TDCCCapiATLApplet_GetErrorCode@8
_Java_com_Twca_TDCCCapiATLApplet_GetErrorMsg@8
_Java_com_Twca_TDCCCapiATLApplet_GetExportedPfxFileName@8
_Java_com_Twca_TDCCCapiATLApplet_GetExportedPfxFilePath@8
_Java_com_Twca_TDCCCapiATLApplet_GetIECertCommonName@12
_Java_com_Twca_TDCCCapiATLApplet_GetIECertCount@8
_Java_com_Twca_TDCCCapiATLApplet_GetIECertFinger@12
_Java_com_Twca_TDCCCapiATLApplet_GetIECertIssuer@12
_Java_com_Twca_TDCCCapiATLApplet_GetIECertNotAfter@12
_Java_com_Twca_TDCCCapiATLApplet_GetIECertNotBefore@12
_Java_com_Twca_TDCCCapiATLApplet_GetIECertSerial@12
_Java_com_Twca_TDCCCapiATLApplet_GetIECertSubject@12
_Java_com_Twca_TDCCCapiATLApplet_GetImportedPfxFileName@8
_Java_com_Twca_TDCCCapiATLApplet_GetImportedPfxFilePath@8
_Java_com_Twca_TDCCCapiATLApplet_GetMacAddress@8
_Java_com_Twca_TDCCCapiATLApplet_GetOSName@8
_Java_com_Twca_TDCCCapiATLApplet_GetPortEx@8
_Java_com_Twca_TDCCCapiATLApplet_GetServerAuth@8
_Java_com_Twca_TDCCCapiATLApplet_GetSignerPfxFileName@8
_Java_com_Twca_TDCCCapiATLApplet_GetSignerPfxFilePath@8
_Java_com_Twca_TDCCCapiATLApplet_GetUserHomePath@8
_Java_com_Twca_TDCCCapiATLApplet_GetVersion@8
_Java_com_Twca_TDCCCapiATLApplet_Hash@16
_Java_com_Twca_TDCCCapiATLApplet_HashFile@16
_Java_com_Twca_TDCCCapiATLApplet_ImportPfxToIE@28
_Java_com_Twca_TDCCCapiATLApplet_PresetPasswdLengthRange@16
_Java_com_Twca_TDCCCapiATLApplet_QueryPfxInfo@28
_Java_com_Twca_TDCCCapiATLApplet_RegReadHKCU@12
_Java_com_Twca_TDCCCapiATLApplet_RegReadHKLM@12
_Java_com_Twca_TDCCCapiATLApplet_RegWriteHKCUInt@16
_Java_com_Twca_TDCCCapiATLApplet_RegWriteHKCUStr@16
_Java_com_Twca_TDCCCapiATLApplet_SelectSigner@20
_Java_com_Twca_TDCCCapiATLApplet_SelectSignerEx2@36
_Java_com_Twca_TDCCCapiATLApplet_SelectSignerEx@36
_Java_com_Twca_TDCCCapiATLApplet_SetDefaultPfxFileName@12
_Java_com_Twca_TDCCCapiATLApplet_SetProviderName@12
_Java_com_Twca_TDCCCapiATLApplet_SignPkcs1@16
_Java_com_Twca_TDCCCapiATLApplet_SignPkcs7@16
_Java_com_Twca_TDCCCapiATLApplet_SymDecrypt@24
_Java_com_Twca_TDCCCapiATLApplet_SymEncrypt@24
_Java_com_Twca_TDCCCapiATLApplet_VerifyServerResponse@12
_PresetPasswdLengthRange@8
_QueryPfxInfo@20
_RegReadHKCU@4
_RegReadHKLM@4
_RegWriteHKCUInt@8
_RegWriteHKCUStr@8
_SelectSigner@12
_SelectSignerEx2@28
_SelectSignerEx@28
_SetCommunityType@4
_SetDefaultPfxFileName@4
_SetProviderName@4
_SignPkcs1@8
_SignPkcs1Hashed@8
_SignPkcs7@8
_SignPkcs7Hashed@8
_SymDecrypt@16
_SymEncrypt@16
_VerifyServerResponse@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ