Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
birdwp.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
birdwp.exe
Resource
win10v2004-20240708-en
Target
0d5cdc4e95aef8ff2d4771f1f88444e0N.cab
Size
2.6MB
MD5
0d5cdc4e95aef8ff2d4771f1f88444e0
SHA1
374770df703a3c418e00c93bb21b952d7040a7de
SHA256
e9ce20c05d9f086be5d56f4bbc4263a5551fdef986ba39cc8a2413cfe21b7b40
SHA512
a94027c3043f2e8a528ca38f36a3091b6acb6b8260cd63bcf6161307f0334162107657b472c8018b00fa88e8910fb9995a57c6d8569c0d045c334f394a91305c
SSDEEP
49152:FJm9eR46rLFpJLyVKkHfLWGin+jpjSM+sl1jaTRRlz1HC6n1i1rqSB:e9eewzxUK9Gis0svoRlz1ZnwrPB
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\Jenkins\.jenkins\workspace\birdwp\360wpapp\Release\birdwp.pdb
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
GetCurrentProcessId
SetUnhandledExceptionFilter
lstrcmpiW
LoadLibraryExW
GetCommandLineW
CreateDirectoryW
IsBadReadPtr
GetWindowsDirectoryW
GetFileSizeEx
TryEnterCriticalSection
VirtualAlloc
VirtualFree
GetFullPathNameW
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
GetFileType
GetModuleHandleA
GetStdHandle
GetSystemWindowsDirectoryW
lstrcmpiA
lstrcmpA
InterlockedExchangeAdd
UnhandledExceptionFilter
GetSystemDirectoryW
ExpandEnvironmentStringsW
DecodePointer
UnmapViewOfFile
MapViewOfFile
FlushFileBuffers
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
FormatMessageW
LoadLibraryExA
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
GetThreadLocale
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetVolumeInformationW
RemoveDirectoryW
VirtualProtect
CreateFileMappingW
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
DuplicateHandle
ReleaseSemaphore
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
GetModuleHandleExW
GetACP
WriteConsoleW
ExitProcess
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
GetConsoleCP
IsValidCodePage
GetOEMCP
FindFirstFileExW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
SetEndOfFile
DeviceIoControl
GetLogicalDriveStringsW
lstrcmpW
MulDiv
GlobalUnlock
GlobalLock
InterlockedDecrement
InterlockedIncrement
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerW
WaitForSingleObjectEx
LocalFileTimeToFileTime
ResumeThread
WritePrivateProfileStringW
GetPrivateProfileIntW
GetUserDefaultLangID
MoveFileA
DeleteFileA
CreateFileA
SetFilePointer
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MoveFileExW
MoveFileW
GetFileAttributesW
SetFileAttributesW
GetTempFileNameW
GetTempPathW
GetStartupInfoW
CreateProcessW
CreateMutexW
TerminateProcess
OpenProcess
GetShortPathNameW
LocalAlloc
GetVersion
GetPrivateProfileStringW
GlobalFree
CreateThread
InterlockedCompareExchange
WaitForMultipleObjects
CreateEventW
WaitForSingleObject
SetEvent
GetLocalTime
GetFileTime
WriteFile
LocalFree
GlobalAlloc
FreeResource
GetDiskFreeSpaceExW
GetDriveTypeW
lstrcatW
CopyFileW
CopyFileA
DeleteFileW
lstrcpyW
lstrlenW
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FindClose
QueryPerformanceCounter
SystemTimeToFileTime
GetSystemTime
SetFileTime
GetModuleHandleW
LoadLibraryW
LoadLibraryA
GetTickCount
Sleep
GetCurrentProcess
SetThreadLocale
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesExW
CreateFileW
GetModuleFileNameW
lstrcpynW
CloseHandle
ReadFile
GetFileSize
GetVersionExW
FindResourceExW
FindResourceW
SizeofResource
LoadResource
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetLastError
GetCurrentThreadId
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
LockResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetThreadPriority
GetLogicalProcessorInformation
InterlockedPopEntrySList
CreateTimerQueueTimer
GetActiveWindow
PostQuitMessage
GetCursor
IsWindowEnabled
GetClassNameW
GetDesktopWindow
EqualRect
OffsetRect
UnionRect
InflateRect
FillRect
GetSysColor
ClientToScreen
WindowFromPoint
wsprintfW
DrawFocusRect
GetClipCursor
ClipCursor
GetWindowTextLengthW
GetWindowTextW
RedrawWindow
InvalidateRgn
TrackPopupMenu
DestroyAcceleratorTable
CreateAcceleratorTableW
GetFocus
CharNextW
IsZoomed
MoveWindow
IsChild
GetDoubleClickTime
RegisterWindowMessageW
GetShellWindow
GetWindowThreadProcessId
GetWindowInfo
GetAncestor
GetForegroundWindow
DialogBoxParamW
EndDialog
GetKeyNameTextW
IsRectEmpty
UpdateWindow
GetMenuItemInfoW
GetMenuInfo
GetMenuItemCount
DestroyMenu
GetMenuStringW
MsgWaitForMultipleObjects
PeekMessageW
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
CreateDialogParamW
DispatchMessageW
TranslateMessage
GetMessageW
GetSystemMetrics
SendMessageTimeoutW
BringWindowToTop
SystemParametersInfoW
SetForegroundWindow
FindWindowW
SetParent
LoadImageW
FindWindowExW
MapVirtualKeyW
UnregisterClassW
EnableWindow
IsIconic
GetMonitorInfoW
MonitorFromWindow
MapWindowPoints
SetRectEmpty
IntersectRect
SetRect
SetWindowRgn
MessageBoxW
DrawTextW
GetCursorPos
GetWindow
ChildWindowFromPoint
SetWindowTextW
SetFocus
GetDlgItem
PtInRect
SetCursor
LoadCursorW
GetParent
SetWindowLongW
GetWindowLongW
ScreenToClient
GetWindowRect
GetClientRect
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetAsyncKeyState
IsWindowVisible
SetWindowPos
UpdateLayeredWindow
ShowWindow
DestroyWindow
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
PostMessageW
SendMessageW
CopyRect
PatBlt
GetViewportOrgEx
GetRgnBox
GetClipRgn
CreateRectRgn
CreatePen
SetTextColor
SetBkMode
GetTextExtentPoint32W
ExtTextOutW
SetBkColor
ExcludeClipRect
GetObjectW
CreateDIBSection
SelectClipRgn
SaveDC
RestoreDC
CreateRectRgnIndirect
SetStretchBltMode
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
LineTo
MoveToEx
SetDIBits
GdiFlush
GetStockObject
CombineRgn
CreateBrushIndirect
CreateEllipticRgn
CreateSolidBrush
FillRgn
PtInRegion
CreatePolygonRgn
SetViewportOrgEx
CreateFontW
EnumFontFamiliesW
GetObjectType
CreateFontIndirectW
TextOutW
StretchBlt
OffsetViewportOrgEx
RectVisible
SetDCPenColor
Rectangle
GetObjectA
GetSaveFileNameW
GetOpenFileNameW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
CheckTokenMembership
DuplicateTokenEx
LookupPrivilegeValueW
GetLengthSid
FreeSid
AllocateAndInitializeSid
CreateWellKnownSid
AdjustTokenPrivileges
SetTokenInformation
OpenProcessToken
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetUserNameW
GetTokenInformation
RegEnumKeyExA
SHGetSpecialFolderPathW
ShellExecuteW
SHGetPathFromIDListW
SHChangeNotify
SHBrowseForFolderW
SHCreateDirectoryExW
SHGetFolderPathW
SHFileOperationW
ord165
ShellExecuteExW
SHCreateDirectoryExA
CoGetClassObject
OleInitialize
CoCreateInstance
CoInitializeSecurity
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleLockRunning
CoTaskMemRealloc
CoCreateGuid
CreateStreamOnHGlobal
CLSIDFromString
CoInitialize
CoUninitialize
StringFromGUID2
SysStringByteLen
VarBstrCmp
DispCallFunc
VariantChangeType
SafeArrayGetVartype
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
VarUI4FromStr
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VariantInit
SysAllocStringLen
SysStringLen
VariantClear
SysAllocStringByteLen
SHDeleteValueW
PathCombineW
StrToIntA
StrToIntW
StrStrIW
StrCmpIW
AssocQueryStringW
StrStrIA
PathRemoveFileSpecA
PathCompactPathW
PathFindFileNameW
PathIsDirectoryW
PathIsRootW
PathRemoveFileSpecW
StrTrimA
SHSetValueA
PathIsURLW
SHSetValueW
UrlIsW
StrToIntExW
SHGetValueW
PathFileExistsW
PathAppendW
PathFindExtensionW
SHGetValueA
StrCmpNIW
InitCommonControlsEx
_TrackMouseEvent
AlphaBlend
GdipDrawImagePointRectI
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipSetTextRenderingHint
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawImageRectRectI
GdipFillRectangles
GdipSetInterpolationMode
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFillPath
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateFont
GdipAddPathArcI
GdipAddPathLineI
GdipDeletePath
GdipCreatePath
GdipFree
GdipAlloc
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawImageRectRect
GdipFillRectangleI
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
URLDownloadToFileW
URLDownloadToCacheFileW
InternetGetConnectedState
InternetCreateUrlW
DeleteUrlCacheEntryW
InternetQueryOptionW
InternetQueryOptionA
InternetGetCookieW
InternetSetCookieW
InternetCrackUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetSetOptionW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
AcquireCredentialsHandleA
GetUserNameExW
FreeCredentialsHandle
InitializeSecurityContextA
RasGetConnectStatusW
RasEnumConnectionsW
send
recv
htons
connect
closesocket
shutdown
gethostbyname
WSAGetLastError
WSAAsyncGetHostByName
WSAAsyncSelect
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAWaitForMultipleEvents
bind
ioctlsocket
getsockname
setsockopt
gethostname
WSAStartup
WSACleanup
socket
timeKillEvent
timeBeginPeriod
timeEndPeriod
timeSetEvent
GetModuleFileNameExW
GetAdaptersInfo
CertGetNameStringW
WTHelperProvDataFromStateData
WinVerifyTrust
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ