Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
9aea560d933ecf64e804a6678b71ad8d4600baeb680333c04bef700acafcfc87.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9aea560d933ecf64e804a6678b71ad8d4600baeb680333c04bef700acafcfc87.exe
Resource
win10v2004-20240508-en
Target
9aea560d933ecf64e804a6678b71ad8d4600baeb680333c04bef700acafcfc87
Size
8.1MB
MD5
af937dcb4a3b1dba0801cf526052d773
SHA1
cae244894a355f2e259fc85e7e7c06474ea3c584
SHA256
9aea560d933ecf64e804a6678b71ad8d4600baeb680333c04bef700acafcfc87
SHA512
86ee9e42c11eb9e25e994f1b644c2ebdb283cc6efb55d03c4d3a3c37c68e68f588a9bd6ef23060ca928fe912259abb3f567d199aff524df757b1e7c59d0fb3ae
SSDEEP
196608:h7bGn9OEyda7BhnxUvWvIhlsLWEi2Z2TmoCIXBTCeIiCUq6Xpp7:Z6NxUvWwULWz2WmotXxpIiWE
resource | yara_rule |
---|---|
sample | detect_ak_stuff |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\project\rel\PDFConverter.pdb
CreateEventW
SetEvent
CreateThread
HeapDestroy
MulDiv
GlobalUnlock
CreateFileMappingW
FormatMessageA
GetSystemTimeAsFileTime
VerifyVersionInfoW
GetModuleHandleW
CreateProcessW
GetCurrentProcessId
VerSetConditionMask
LocalFree
GlobalLock
GetWindowsDirectoryW
GetCurrentDirectoryW
FindResourceW
LoadResource
GlobalAlloc
LockResource
OpenProcess
GetVersionExW
GetCurrentThreadId
GetStdHandle
GetCurrentProcess
SizeofResource
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
lstrcmpiW
GlobalFree
lstrlenW
ExitProcess
LoadLibraryA
FreeLibrary
MoveFileW
GetLocalTime
SystemTimeToFileTime
GetSystemTime
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetFileAttributesW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetExitCodeProcess
GetStartupInfoW
CreatePipe
GetFileSize
WaitForSingleObject
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
WideCharToMultiByte
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetACP
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetConsoleCtrlHandler
SetFilePointerEx
GetModuleHandleExW
ExitThread
FindFirstFileExW
MoveFileExW
GetTempPathA
GetTickCount
GetPrivateProfileStringW
TerminateProcess
InterlockedIncrement
HeapSize
InterlockedDecrement
SetLastError
RaiseException
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
Sleep
CopyFileW
FindResourceExW
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
GetLocaleInfoW
GetFileTime
GetDriveTypeW
CreateMutexW
DeleteFileW
GetFileAttributesExW
GetLastError
CreateFileW
GetTempPathW
GetModuleFileNameW
WriteFile
GetFullPathNameW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
ReleaseSemaphore
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
UnhandledExceptionFilter
LCMapStringW
CompareStringW
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStringTypeW
TryEnterCriticalSection
GetCurrentThread
WaitForSingleObjectEx
DuplicateHandle
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
InterlockedCompareExchange
lstrcpynW
FormatMessageW
FlushConsoleInputBuffer
GlobalMemoryStatus
QueryPerformanceCounter
GetModuleHandleA
ExpandEnvironmentStringsA
PeekNamedPipe
GetFileType
SleepEx
SetErrorMode
GetFileAttributesExA
InitializeCriticalSection
GetFileSizeEx
ReadFile
MapViewOfFile
UnmapViewOfFile
lstrcmpA
DeviceIoControl
VirtualProtect
IsBadReadPtr
SetUnhandledExceptionFilter
WaitForMultipleObjects
SetEndOfFile
GetQueuedCompletionStatus
InterlockedExchange
CreateIoCompletionPort
TerminateThread
GetExitCodeThread
PostQueuedCompletionStatus
ResetEvent
GetNativeSystemInfo
GetVersion
GetSystemInfo
SetThreadLocale
GetThreadLocale
lstrlenA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateFileA
SetFilePointer
DecodePointer
GetTempFileNameW
LoadLibraryExW
CreateDirectoryW
OutputDebugStringW
OutputDebugStringA
CloseHandle
SetStdHandle
MultiByteToWideChar
EndPaint
BeginPaint
GetFocus
DrawIconEx
GetIconInfo
IsRectEmpty
SetWindowRgn
FillRect
IntersectRect
GetDoubleClickTime
EqualRect
SetRectEmpty
UpdateLayeredWindow
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
SetCapture
GetParent
SystemParametersInfoW
wsprintfW
GetWindowThreadProcessId
GetWindowLongW
GetDlgItem
DefWindowProcW
CallWindowProcW
KillTimer
PostMessageW
UnregisterClassW
GetActiveWindow
IsWindow
MapWindowPoints
GetWindow
RegisterClassExW
GetClassInfoExW
CreateWindowExW
MessageBoxW
UpdateWindow
FindWindowW
SendMessageTimeoutW
DrawTextW
GetClientRect
SetWindowLongW
SetCursor
LoadCursorW
BringWindowToTop
MoveWindow
GetForegroundWindow
AttachThreadInput
TrackMouseEvent
ClientToScreen
GetMonitorInfoW
IsWindowVisible
SetFocus
LoadIconW
EnableWindow
GetClassNameW
RegisterClipboardFormatW
EnumWindows
SetTimer
CharNextW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
PtInRect
CopyRect
FindWindowExW
GetWindowTextW
PostQuitMessage
IsZoomed
OffsetRect
SetLayeredWindowAttributes
SetWindowTextW
GetWindowTextLengthW
MonitorFromPoint
GetCaretBlinkTime
ShowWindow
GetSystemMetrics
SendMessageW
CreateCaret
SetCaretPos
GetSysColor
ScreenToClient
IsClipboardFormatAvailable
GetWindowRect
SetForegroundWindow
InvalidateRect
IsIconic
GetDC
SetActiveWindow
MonitorFromWindow
MonitorFromRect
SetWindowPos
DestroyWindow
GetCursorPos
ReleaseDC
ReleaseCapture
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
SetBkMode
CreateFontIndirectW
GetObjectW
GetDIBits
GetDeviceCaps
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
GetBitmapBits
SetBitmapBits
SetPixel
SetStretchBltMode
StretchBlt
CombineRgn
CreateRectRgn
SetTextColor
SetBkColor
GetStockObject
CreatePen
Rectangle
ExtSelectClipRgn
CreateRectRgnIndirect
SaveDC
RestoreDC
GetTextColor
GetCurrentObject
SetTextCharacterExtra
GetViewportOrgEx
GetSaveFileNameW
GetOpenFileNameW
RegisterEventSourceA
DeregisterEventSource
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
ReportEventA
ShellExecuteA
DragAcceptFiles
DragFinish
DragQueryFileW
ord165
SHGetPathFromIDListW
SHBrowseForFolderW
SHFileOperationW
SHCreateDirectoryExW
ShellExecuteExW
SHGetDesktopFolder
ShellExecuteW
SHGetSpecialFolderPathW
CoUninitialize
CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
ReleaseStgMedium
StgCreateDocfile
RevokeDragDrop
CoLockObjectExternal
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleInitialize
RegisterDragDrop
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
VariantClear
SysAllocStringLen
SystemTimeToVariantTime
SysAllocStringByteLen
VarDateFromStr
VariantTimeToSystemTime
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
VariantInit
SysAllocString
SysStringByteLen
VarBstrCmp
PathRemoveFileSpecW
PathSearchAndQualifyW
PathCombineW
PathIsDirectoryW
PathFileExistsW
PathFindFileNameW
PathFindFileNameA
PathRemoveExtensionA
PathRemoveExtensionW
PathIsRootW
StrCmpIW
PathAddBackslashW
StrStrIW
PathAppendW
PathFindExtensionW
SHGetValueW
ord17
AlphaBlend
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDeleteBrush
GdipCloneBrush
GdipCreateBitmapFromFile
GdipSetTextRenderingHint
GdipDrawString
GdipCreateBitmapFromHBITMAP
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipDeleteGraphics
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdiplusStartup
GdipSetPropertyItem
GdipGetImageEncoders
GdipCreateBitmapFromStream
GdipCreateFontFamilyFromName
GdipSaveImageToFile
GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdipGetImagePixelFormat
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapSetResolution
GdipFree
GdipCloneBitmapAreaI
GdipDisposeImage
GdipAlloc
GdipBitmapUnlockBits
GdipCloneImage
GdipGetImageEncodersSize
GdipCreateFromHDC
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
InternetSetOptionW
InternetOpenW
InternetCrackUrlW
HttpQueryInfoW
HttpSendRequestW
InternetReadFile
CryptBinaryToStringW
CryptStringToBinaryW
Netbios
connect
closesocket
select
bind
send
getpeername
WSASetLastError
WSAGetLastError
WSACleanup
WSAStartup
htonl
getsockname
shutdown
gethostname
ioctlsocket
sendto
__WSAFDIsSet
listen
accept
freeaddrinfo
getaddrinfo
WSAIoctl
socket
setsockopt
ntohs
htons
recv
getsockopt
getservbyname
gethostbyname
recvfrom
ord145
ord14
ord216
ord208
ord41
ord118
ord26
ord27
ord127
ord167
ord142
ord79
ord133
ord147
ord301
ord46
GetAdaptersInfo
GetIpAddrTable
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetModuleFileNameExW
ord4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ