Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
1923dae6b9bcd99d3ad2468d53c4cc854d166b8b31d987e746a8504f5022ec76.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1923dae6b9bcd99d3ad2468d53c4cc854d166b8b31d987e746a8504f5022ec76.exe
Resource
win10v2004-20240508-en
Target
1923dae6b9bcd99d3ad2468d53c4cc854d166b8b31d987e746a8504f5022ec76
Size
7.8MB
MD5
d1a3ab4e2052f2609c65b6916806134a
SHA1
65958853ae0df505aba5b4ac85645b28f4809cf2
SHA256
1923dae6b9bcd99d3ad2468d53c4cc854d166b8b31d987e746a8504f5022ec76
SHA512
7ea3a6d27270a1b6db52e0e344956917cc4f392701a58dad4e607ade0642d288532922112ef658ad63f72fcdb23d3303b56d4fef976684687a05b064bbc4bc61
SSDEEP
6144:dtyZZlWcE7gSZwyi6fBaFN7bW28Ha6vXkGMUHVw:uLlkZwyiGkFN7bXua2nHV
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LangSelector.pdb
RegCloseKey
RegOpenCurrentUser
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
GetSecurityDescriptorOwner
SetNamedSecurityInfoW
ImpersonateLoggedOnUser
RevertToSelf
RegQueryInfoKeyW
RegEnumValueW
GetSecurityDescriptorDacl
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
GetTokenInformation
OpenProcessToken
GetUserNameW
RegGetValueW
GetTraceLoggerHandle
UnregisterTraceGuids
RegisterTraceGuidsW
TraceEvent
SizeofResource
LoadResource
LockResource
FreeResource
GetThreadPriority
SetThreadPriority
ResetEvent
FileTimeToSystemTime
GlobalFree
WaitForMultipleObjects
GetLongPathNameW
ExpandEnvironmentStringsW
VirtualFree
OpenFileMappingW
VirtualAlloc
GetCurrentThread
lstrlenW
SetFilePointerEx
GetProcessHeap
HeapFree
HeapAlloc
GetUserDefaultLocaleName
GetProductInfo
GetNativeSystemInfo
ReleaseMutex
GetExitCodeThread
CreateThread
SetEvent
GetFileAttributesExW
LocalAlloc
DeleteTimerQueueTimer
CreateTimerQueueTimer
RaiseException
UnlockFileEx
LockFileEx
CompareStringEx
SystemTimeToFileTime
CreateHardLinkTransactedW
MoveFileExW
DeleteFileTransactedW
GetSystemTime
SetFileTime
RemoveDirectoryA
GetTempPathA
FileTimeToDosDateTime
GetFullPathNameA
GetFileInformationByHandle
GetFileAttributesA
FileTimeToLocalFileTime
DeleteFileA
CreateFileA
CreateEventW
CreateMutexW
InterlockedCompareExchange
GetCommandLineW
GetLocaleInfoEx
LocalFree
GetTickCount
FindResourceW
Sleep
GetTempPathW
RemoveDirectoryW
GetNamedPipeServerProcessId
QueryFullProcessImageNameW
OpenProcess
WaitForSingleObject
CreateNamedPipeW
GetTempFileNameW
GetComputerNameExW
GetModuleFileNameW
GetLocalTime
GetCurrentProcessId
GetFileAttributesW
FlushFileBuffers
GetSystemDefaultLocaleName
MultiByteToWideChar
GetComputerNameW
UnmapViewOfFile
MapViewOfFile
LoadLibraryExW
DuplicateHandle
CreateFileMappingW
GetFileSize
CopyFileW
WerRegisterFile
GetSystemDefaultLCID
GetSystemDefaultUILanguage
WideCharToMultiByte
InterlockedIncrement
CloseHandle
WriteFile
SetFilePointer
SetFileAttributesW
ReadFile
GetFullPathNameW
GetFileSizeEx
CreateFileW
CreateDirectoryW
CompareFileTime
GetEnvironmentVariableW
GetVersionExW
GetSystemInfo
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
EncodePointer
FreeLibrary
GetProcAddress
LoadLibraryW
FindAtomW
CompareStringW
GetThreadUILanguage
DeleteCriticalSection
GetModuleHandleW
SetDllDirectoryW
GlobalMemoryStatusEx
FreeLibraryAndExitThread
OpenMutexW
InterlockedExchange
InterlockedDecrement
SetLastError
GetLastError
GetCurrentProcess
DispatchMessageW
GetSystemMetrics
TranslateMessage
MsgWaitForMultipleObjects
PostMessageW
SetProcessDefaultLayout
SendMessageW
LoadStringW
PeekMessageW
ceil
??_V@YAXPAX@Z
_XcptFilter
_calloc_crt
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_lock
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
_commode
wcsstr
rand_s
_wcsnicmp
_wcsicmp
wcsrchr
towupper
_CxxThrowException
_purecall
memset
memcpy
__CxxFrameHandler3
_vsnwprintf
_vsnprintf
realloc
malloc
free
??3@YAXPAX@Z
_fmode
_acmdln
_initterm
_initterm_e
__setusermatherr
sprintf_s
strcpy_s
isspace
isprint
wcstoul
wcschr
wcstok_s
qsort
_wtoi
memcmp
memmove
iswspace
??_U@YAPAXI@Z
towlower
_configthreadlocale
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
__crtGetShowWindowMode
_unlock
SHCreateDirectoryExW
ord165
SHGetKnownFolderPath
ShellExecuteW
SHGetFolderPathAndSubDirW
CommandLineToArgvW
ord43
SHGetSpecialFolderPathW
CoTaskMemFree
CoInitializeEx
StringFromGUID2
CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize
SysFreeString
SysAllocString
SysStringLen
?Click@Button@DirectUI@@2PAEA
?Class@HWNDElement@DirectUI@@2PAUIClassInfo@2@A
?IDProp@Element@DirectUI@@2PAUPropertyInfo@2@A
?LayoutPosProp@Element@DirectUI@@2PAUPropertyInfo@2@A
?ParentProp@Element@DirectUI@@2PAUPropertyInfo@2@A
?GetTopHWNDParent@DirectUI@@YGPAUHWND__@@PAU2@H@Z
?GetSelectedString@Combobox@DirectUI@@QAEPA_WPAPAVValue@2@@Z
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?CreateInt@Value@DirectUI@@SGPAV12@W4Flags@DuiValueFlags@@H@Z
?_ZeroRelease@Value@DirectUI@@AAEXXZ
?StrToID@DirectUI@@YGGPB_W@Z
??0CDUIDialog@@QAE@XZ
??1CDUIDialog@@UAE@XZ
?InsertString@Combobox@DirectUI@@QAEHHPB_W@Z
?ResetContent@Combobox@DirectUI@@QAEHXZ
?RMLoadStringBSTR@@YGPA_WPBDIK@Z
?SelectionProp@Combobox@DirectUI@@2PAUPropertyInfo@2@A
?CreateBool@Value@DirectUI@@SGPAV12@W4Flags@DuiValueFlags@@_N@Z
?SetValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@HPAVValue@2@@Z
?RMLoadString@@YGIPBDIPA_WIK@Z
?EnabledProp@Element@DirectUI@@2PAUPropertyInfo@2@A
?Class@Combobox@DirectUI@@2PAUIClassInfo@2@A
?SelectionChange@Combobox@DirectUI@@2PAEA
DuiCreateObject
?RMUpdateResourceSet@@YG_NPBDPB_WK11PAUHINSTANCE__@@@Z
UXCoreInitProcess
UXCoreInitThread
UXCoreUnInitProcess
?GetValue@Element@DirectUI@@QBEPAVValue@2@PBUPropertyInfo@2@H@Z
UXCoreUnInitThread
?DoModal@CDUIDialog@@QAEHPBDGPB_WPAUHWND__@@PAUtagPOINT@@1_N1@Z
WTHelperProvDataFromStateData
WinVerifyTrustEx
WTHelperGetProvSignerFromChain
GetUserNameExW
CryptBinaryToStringW
CryptStringToBinaryW
CertVerifyCertificateChainPolicy
PathRemoveArgsW
PathFindFileNameA
StrRChrW
StrCmpNW
ord437
PathAppendW
PathCombineW
PathIsDirectoryW
PathRemoveFileSpecW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathIsRelativeW
PathStripPathW
StrStrIW
PathFileExistsA
PathUnquoteSpacesW
SHGetValueW
WinHttpAddRequestHeaders
WinHttpWriteData
WinHttpCrackUrl
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpSetOption
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpTimeFromSystemTime
WinHttpReadData
WinHttpSetCredentials
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
ord20
ord10
ord23
ord11
ord14
ord22
ord13
NtQuerySystemTime
RtlAllocateHeap
RtlFreeHeap
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
WerReportCloseHandle
WerReportAddFile
WerReportSetParameter
WerReportCreate
WerReportSubmit
WerReportSetUIOption
CreateTransaction
RollbackTransaction
CommitTransaction
PdhGetFormattedCounterValue
PdhOpenQueryW
PdhAddEnglishCounterW
PdhCollectQueryData
PdhCloseQuery
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ