Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
facbcb4ed45be7f4978c39e53de5eeb97cc0915b8b16dff6097c19bf4c5469d9.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
facbcb4ed45be7f4978c39e53de5eeb97cc0915b8b16dff6097c19bf4c5469d9.exe
Resource
win10v2004-20240226-en
Target
facbcb4ed45be7f4978c39e53de5eeb97cc0915b8b16dff6097c19bf4c5469d9
Size
69KB
MD5
eba7fa4013dcb38e75a1ab249b3db3c6
SHA1
e2287830d19395fc45a2ed8c19557d2ade556e45
SHA256
facbcb4ed45be7f4978c39e53de5eeb97cc0915b8b16dff6097c19bf4c5469d9
SHA512
80546491e89449ab832b5ad9ef092e3057d040d79343e71bad2ff62597be2ebf52189f74051248de7bcb90fd1c7a8d472956f84090a0b864bb89a912b3cfeb20
SSDEEP
1536:nmXDKvU1DIF5nNP/WxUVgOAfNLPnToIfSRgBpZTDljEVu:aO5nNnWygOAfNLfTBfS2LjEVu
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
CloseHandle
GetModuleHandleW
CreateFileW
DeleteFileW
DecodePointer
GetFileSize
ReadFile
DeleteCriticalSection
WritePrivateProfileStringW
GetTickCount
CreateEventW
WaitForSingleObject
SetEvent
GetWindowsDirectoryW
InitializeCriticalSectionAndSpinCount
GetLastError
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
EncodePointer
GetModuleFileNameW
IsDebuggerPresent
OutputDebugStringW
GetSystemDirectoryW
?BaseName@FilePath@base@@QBE?AV12@XZ
?Append@FilePath@base@@QBE?AV12@V?$BasicStringPiece@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@Z
??4FilePath@base@@QAEAAV01@ABV01@@Z
??1FilePath@base@@QAE@XZ
??0FilePath@base@@QAE@XZ
??0FilePath@base@@QAE@V?$BasicStringPiece@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@1@@Z
?DeleteFileW@base@@YA_NABVFilePath@1@_N@Z
?SplitString@base@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_WPAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@@Z
?StringPrintf@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WZZ
?empty@FilePath@base@@QBE_NXZ
?ReferencesParent@FilePath@base@@QBE_NXZ
??1LogMessage@logging@@QAE@XZ
?MakeAbsoluteFilePath@base@@YA?AVFilePath@1@ABV21@@Z
?GetCurrentDirectoryW@base@@YA_NPAVFilePath@1@@Z
??0LockImpl@internal@base@@QAE@XZ
??1LockImpl@internal@base@@QAE@XZ
?Lock@LockImpl@internal@base@@QAEXXZ
?Unlock@LockImpl@internal@base@@QAEXXZ
??0CallbackBase@internal@base@@QAE@ABV012@@Z
??0CallbackBase@internal@base@@IAE@PAVBindStateBase@12@@Z
??1CallbackBase@internal@base@@IAE@XZ
?DirName@FilePath@base@@QBE?AV12@XZ
?GetTempDir@base@@YA_NPAVFilePath@1@@Z
?GetHomeDir@base@@YA?AVFilePath@1@XZ
?Create@Environment@base@@SAPAV12@XZ
?AppendASCII@FilePath@base@@QBE?AV12@V?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@Z
?UTF8ToWide@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@1@@Z
?GetInstance@OSInfo@win@base@@SAPAV123@XZ
?YieldCurrentThread@PlatformThread@base@@SAXXZ
?SysWideToMultiByte@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@I@Z
?UninitializeInfra@infra@@YAXXZ
?InitializeInfra@infra@@YAXXZ
?HexStringToBytes@base@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV?$vector@EV?$allocator@E@std@@@3@@Z
?SysWideToUTF8@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?PathExists@base@@YA_NABVFilePath@1@@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0_Container_base12@std@@QAE@XZ
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??Bid@locale@std@@QAEIXZ
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
PathFileExistsW
InternetGetConnectedState
InternetOpenW
InternetSetStatusCallbackW
InternetCrackUrlW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
_CxxThrowException
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
_except_handler4_common
_commode
??3@YAXPAX@Z
free
memcpy_s
??_V@YAXPAX@Z
_wcsicmp
??2@YAPAXI@Z
_wfopen_s
fseek
ftell
fread_s
memmove
__argc
__wargv
atoi
?terminate@@YAXXZ
_purecall
_vsnwprintf
fclose
fwrite
memcpy
malloc
fopen
fread
ferror
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
memset
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
__CxxFrameHandler3
SHGetFolderPathW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ