Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
bf698419cea82e1dc468a7514e796e347da15425e85757654685629cf0e80b0b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf698419cea82e1dc468a7514e796e347da15425e85757654685629cf0e80b0b.exe
Resource
win10v2004-20240508-en
Target
bf698419cea82e1dc468a7514e796e347da15425e85757654685629cf0e80b0b
Size
411KB
MD5
b1c393e980e8e7aff1b4312c392399b6
SHA1
2ee9e281b1cdf4f4eb855204b6cc3e40c0e19d62
SHA256
bf698419cea82e1dc468a7514e796e347da15425e85757654685629cf0e80b0b
SHA512
e0396fbd20883296ab20da1d1de32fb1c9c9082d316915f046e5436e8d78658a00cde483fa67bf78e736633f7073f70d56507c3251f650ceb1b6769747e8ef62
SSDEEP
6144:v5eJT5CM+ozjdKpfe58fYIvoRNoYsIMr4rooUBDXF:xe/DfYe6wIvokI6Coo4J
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\RDBuildPool\20240514-09393\internal_only\x64\Foto.pdb
FindClose
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
CreateEventW
GetPrivateProfileStringW
Sleep
GetLastError
OutputDebugStringW
SetEvent
GetCurrentThread
DeleteFileW
CloseHandle
LoadLibraryW
ResetEvent
GetUserGeoID
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
CreateMutexW
LoadLibraryExW
LoadLibraryExA
SetLastError
VirtualQueryEx
VirtualProtectEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
SuspendThread
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetThreadPriority
RemoveDirectoryW
OutputDebugStringA
FindNextFileW
GetCommandLineW
EnterCriticalSection
FindFirstFileExW
QueryPerformanceCounter
QueryPerformanceFrequency
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
DestroyWindow
ReleaseDC
SetForegroundWindow
GetDesktopWindow
UpdateLayeredWindow
wsprintfW
LoadCursorW
FindWindowW
GetMonitorInfoW
DispatchMessageW
ShowWindow
GetWindowPlacement
RegisterClassExW
UnregisterClassW
GetDC
DefWindowProcW
MonitorFromWindow
GetMessageW
MonitorFromRect
FillRect
CreateWindowExW
SendMessageW
PostMessageW
IsWindowVisible
CreateCompatibleBitmap
SelectObject
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
CreateCompatibleDC
StretchBlt
GetDeviceCaps
DeleteDC
GetObjectW
DeleteObject
CreateSolidBrush
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
SHCreateDirectoryExW
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Xout_of_range@std@@YAXPEBD@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J_W@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
PathRemoveFileSpecW
PathFileExistsW
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipDeleteGraphics
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipAlloc
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
TransparentBlt
AlphaBlend
__CxxFrameHandler4
memset
memmove
memcpy
__current_exception_context
__current_exception
_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
wcsstr
_lock_file
_wmakepath_s
_wsplitpath_s
_wsplitpath
_unlock_file
_resetstkoflw
_invalid_parameter_noinfo_noreturn
__p___wargv
__p___argc
_errno
_register_thread_local_exe_atexit_callback
_c_exit
_exit
_invalid_parameter_noinfo
exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
terminate
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
_beginthreadex
_set_fmode
_fseeki64
fsetpos
ungetc
__stdio_common_vsnprintf_s
__p__commode
fgetwc
setvbuf
__stdio_common_vsprintf_s
getwc
fgetpos
__stdio_common_vswprintf_s
fflush
fwrite
__stdio_common_vsnwprintf_s
_wfopen_s
fclose
fputwc
fgetc
ungetwc
_callnewh
malloc
free
calloc
_recalloc
_set_new_mode
_wcslwr_s
toupper
strcmp
wcscpy_s
wcstol
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ