Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a88c325b7606e8753edf81c24cf940c81d860a08025b5568e851fdf8f3cdbc6e.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a88c325b7606e8753edf81c24cf940c81d860a08025b5568e851fdf8f3cdbc6e.exe
Resource
win10v2004-20240508-en
Target
a88c325b7606e8753edf81c24cf940c81d860a08025b5568e851fdf8f3cdbc6e
Size
868KB
MD5
31be53371186241259c93e632612f3f2
SHA1
900b01f13049b4fb178fc684f895a6c513db3e18
SHA256
a88c325b7606e8753edf81c24cf940c81d860a08025b5568e851fdf8f3cdbc6e
SHA512
135b5e0579d7bcbed2c98bb9b36dcb95077c3f5a1994bae9cacdea3c8c05f058afa439f4a7494807f9d88bedbcc0a71e458b09a19e8f821ba4a14b0d9c1865f8
SSDEEP
12288:RenUo++ADsXiz/buQv8MIyZNM9MF8NzmcNRZGkP65KXG9e26uiDgokP65KX:R8P8s+vdIp9pEchO9ygJ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateProcessW
GetCommandLineA
SetEvent
LocalFree
CreateEventW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetFileAttributesW
CreateDirectoryW
WaitForSingleObject
GlobalLock
RaiseException
FindResourceW
DeleteCriticalSection
GlobalFree
EnterCriticalSection
FlushInstructionCache
OutputDebugStringW
InterlockedDecrement
FreeResource
GetFileSize
GetLocalTime
CreateFileW
GetWindowsDirectoryW
ReadFile
GetCurrentThreadId
LeaveCriticalSection
GlobalDeleteAtom
SetLastError
GlobalUnlock
GetPrivateProfileStringW
GlobalAlloc
GetVersionExW
GetModuleHandleW
GlobalGetAtomNameW
InitializeCriticalSection
GetCurrentProcess
InterlockedExchange
GetPrivateProfileIntW
InterlockedIncrement
GlobalAddAtomW
WideCharToMultiByte
GetTickCount
lstrlenW
Sleep
CloseHandle
GetModuleFileNameW
OpenProcess
GetCommandLineW
MultiByteToWideChar
lstrlenA
GetLastError
LockResource
FindResourceExW
FreeLibrary
SizeofResource
GetProcAddress
LoadLibraryW
LoadResource
SetUnhandledExceptionFilter
GetMonitorInfoW
EqualRect
RegisterClassExW
IsRectEmpty
GetWindowLongW
DrawFrameControl
SetCursor
SetWindowLongW
IsDialogMessageW
RegisterWindowMessageW
UnregisterClassA
CopyRect
SendMessageW
ScreenToClient
CallWindowProcW
GetWindowRect
SendMessageTimeoutW
GetForegroundWindow
PostQuitMessage
SetActiveWindow
SetForegroundWindow
GetWindowThreadProcessId
BringWindowToTop
MessageBoxA
AttachThreadInput
BeginPaint
SetRect
DefWindowProcW
FindWindowW
SetWindowPos
IsChild
SetTimer
SystemParametersInfoW
GetNextDlgTabItem
DrawTextW
IsWindowVisible
DispatchMessageW
KillTimer
DrawIconEx
GetDlgItem
TranslateMessage
OffsetRect
GetMessageW
GetClientRect
PtInRect
GetClassInfoExW
LoadBitmapW
ClientToScreen
GetParent
CreateWindowExW
SetRectEmpty
MoveWindow
LoadCursorW
GetDlgCtrlID
DestroyWindow
InvalidateRect
GetDesktopWindow
MonitorFromWindow
GetWindow
LoadIconW
IntersectRect
LoadImageW
UpdateLayeredWindow
SetFocus
InflateRect
GetCursorPos
DestroyIcon
ReleaseCapture
PostMessageW
IsWindow
FindWindowExW
SetWindowTextW
ShowWindow
ReleaseDC
SetCapture
EndPaint
MapWindowPoints
GetFocus
PeekMessageW
GetDC
GetCurrentObject
MoveToEx
DeleteObject
SetTextColor
GetTextExtentPoint32W
GetStockObject
SetStretchBltMode
LineTo
CombineRgn
CreateFontIndirectW
TextOutW
CreateDIBSection
CreateCompatibleBitmap
DeleteDC
RectInRegion
GetClipRgn
CreatePen
SetBkMode
StretchBlt
GetTextColor
GetObjectW
OffsetRgn
CreateRectRgnIndirect
ExtTextOutW
CreateCompatibleDC
CreateSolidBrush
CreateRoundRectRgn
RoundRect
SelectClipRgn
SetViewportOrgEx
CreateBitmap
RestoreDC
CreateRectRgn
ExtSelectClipRgn
SetBkColor
SaveDC
GetViewportOrgEx
Rectangle
BitBlt
SelectObject
GetDeviceCaps
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetUserNameW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
SetSecurityDescriptorDacl
ShellExecuteW
SHGetFolderPathW
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
SysFreeString
?id@?$numpunct@_W@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z
?_Getcat@?$numpunct@_W@std@@SAIPAPBVfacet@locale@2@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1locale@std@@QAE@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?grouping@?$numpunct@_W@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0locale@std@@QAE@XZ
?thousands_sep@?$numpunct@_W@std@@QBE_WXZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??Bid@locale@std@@QAEIXZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?_Register@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?_Incref@facet@locale@std@@QAEXXZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
PathAppendW
PathRemoveFileSpecW
PathAddBackslashW
PathFindFileNameW
StrToIntW
PathFileExistsW
StrToIntA
_TrackMouseEvent
AlphaBlend
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GdipFree
GdipDeleteFontFamily
GdipCreatePen1
GdipCreateFont
GdipSetPenMode
GdipGraphicsClear
GdipDrawString
GdipAddPathStringI
GdipAddPathRectangleI
GdipDeleteStringFormat
GdipDrawPath
GdipNewPrivateFontCollection
GdipPrivateAddFontFile
GdipDeleteFont
GdipSetPenEndCap
GdipMeasureString
GdipGetFontSize
GdipFillRectangleI
GdipAddPathPieI
GdipAddPathArcI
GdipCreateBitmapFromScan0
GdipSetSmoothingMode
GdipCreateSolidFill
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipSetStringFormatLineAlign
GdipDeleteGraphics
GdipClosePathFigure
GdiplusShutdown
GdipResetWorldTransform
GdipDrawImagePointsRectI
GdipFillRectangle
GdipDrawRectangleI
GdipDeletePrivateFontCollection
GdipSetPenStartCap
GdipGetImagePixelFormat
GdipCreateHBITMAPFromBitmap
GdipSetPixelOffsetMode
GdipGetImageWidth
GdipCreatePath
GdipSetStringFormatTrimming
GdipSetInterpolationMode
GdipDisposeImage
GdipSetStringFormatAlign
GdipDrawImageI
GdipGetFontCollectionFamilyCount
GdipCreateStringFormat
GdipImageRotateFlip
GdipFillPath
GdipSetTextRenderingHint
GdipCreateImageAttributes
GdipLoadImageFromFile
GdipSetPenDashStyle
GdipCloneFontFamily
GdipGetFamily
GdipDrawImageRectRectI
GdipDrawLine
GdipDeletePen
GdiplusStartup
GdipGetImageHeight
GdipGetFontCollectionFamilyList
GdipSetCompositingQuality
GdipAlloc
GdipDrawImageRectI
GdipSetImageAttributesColorMatrix
GdipGetImageGraphicsContext
GdipCreateLineBrushFromRectWithAngleI
GdipDeleteBrush
GdipCreateFromHDC
GdipDrawImageRectRect
GdipDisposeImageAttributes
GdipLoadImageFromStream
GdipSetClipPath
GdipDrawLinesI
GdipCloneImage
GdipCreateBitmapFromStream
GdipSetStringFormatFlags
GdipCreateFontFromLogfontW
GdipDeletePath
GdipCloneBrush
GdipCloneBitmapArea
_CxxThrowException
_wcsicmp
__CxxFrameHandler3
_stricmp
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??8type_info@@QBE_NABV0@@Z
isalpha
tolower
isalnum
strchr
isspace
strncmp
fprintf
_vsnprintf_s
memmove
wcsncmp
_mktime64
_localtime64_s
iswspace
_wcslwr_s
_mbsicmp
strcmp
_wtof
wcsspn
_mbscmp
wcscspn
memcpy
wcscpy
vsprintf_s
labs
_mbschr
_waccess
strlen
_vscprintf
abs
wcschr
atoi
ceil
swprintf_s
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
wcsstr
floor
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
wcscmp
wcsrchr
??0exception@std@@QAE@ABQBD@Z
_purecall
??2@YAPAXI@Z
_beginthreadex
strftime
_recalloc
_time64
calloc
_wtoi
_localtime64
malloc
memmove_s
??_V@YAXPAX@Z
memset
vswprintf_s
__RTDynamicCast
memcpy_s
wcslen
free
_vscwprintf
??3@YAXPAX@Z
_GetInterface@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE