Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f21ce525c27f602a5697dfebd8dccc50N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
f21ce525c27f602a5697dfebd8dccc50N.dll
Resource
win10v2004-20240709-en
Target
f21ce525c27f602a5697dfebd8dccc50N.exe
Size
331KB
MD5
f21ce525c27f602a5697dfebd8dccc50
SHA1
089c47b53beb3a0aa22b36ff2b67c0a4df415f6e
SHA256
d5bc810a82062ee88f957fc9fde7e47dfff9fbf7c5e19d985b5bba739d148023
SHA512
9287049cc82f3b4d0f6c331a40ee8b421e2f9565ef1a014e3ec9f5987f7e551095bba102fa22726b59eb249d61491c94042fac107951d00ccbc55e58fedcc71e
SSDEEP
6144:+OM32pBN4F8p2Yk3y/ng/NdsqkI+EYOX6Qv27Svp+VlFSr+OLv4F7cnz:+OM32pBN4uUy/n2NLkIkYOG+3FQnz
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\jenkins\workspace\Client\Client\Windows\release\bin\Release\CptShare.pdb
RpcStringBindingComposeW
RpcServerUseProtseqEpW
I_RpcBindingInqLocalClientPID
RpcBindingFromStringBindingW
RpcSsDestroyClientContext
RpcServerUnregisterIfEx
RpcStringFreeW
NdrServerCall2
RpcServerRegisterIf2
NdrClientCall2
RpcBindingFree
timeGetTime
FreeResource
GetModuleHandleA
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceW
LocalAlloc
LocalFree
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
TerminateThread
GetExitCodeThread
FileTimeToLocalFileTime
GetLocalTime
lstrcmpA
lstrcpyW
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
GetModuleHandleExW
GetSystemInfo
GetExitCodeProcess
GetFileSize
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
QueryPerformanceCounter
QueryPerformanceFrequency
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
TerminateProcess
GetFileAttributesW
DeleteTimerQueueEx
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateTimerQueue
OpenProcess
DuplicateHandle
IsBadReadPtr
GlobalUnlock
GlobalLock
GlobalAlloc
SetLastError
WideCharToMultiByte
CreateProcessW
GetCurrentProcessId
UnregisterWaitEx
ProcessIdToSessionId
ResumeThread
CreateFileW
InitializeCriticalSection
GetProcessId
WaitForMultipleObjects
GetModuleFileNameW
RegisterWaitForSingleObject
FreeLibrary
ResetEvent
LoadLibraryW
CloseHandle
SetEvent
CreateEventW
GetSystemDirectoryW
WaitForSingleObject
GetVersionExW
GetProcessTimes
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcessHeap
GetProcAddress
FileTimeToSystemTime
Sleep
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcess
HeapDestroy
HeapAlloc
HeapSetInformation
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
HeapCreate
TryEnterCriticalSection
GetTickCount
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DrawIconEx
GetClientRect
SetWindowLongW
LoadCursorW
IntersectRect
IsRectEmpty
CreateIcon
CreateIconIndirect
DestroyIcon
OffsetRect
IsWindow
ShowWindow
RegisterClassExW
CreateWindowExW
FillRect
GetDC
InflateRect
DestroyWindow
CallWindowProcW
GetUpdateRgn
DefWindowProcW
GetWindowLongW
LoadImageW
SetWindowsHookExW
GetClipboardSequenceNumber
GetClipboardData
GetClassInfoExW
EmptyClipboard
CloseClipboard
ChangeClipboardChain
ScreenToClient
GetPriorityClipboardFormat
CallNextHookEx
GetClipboardOwner
SetClipboardViewer
SendMessageTimeoutW
PostMessageW
ShowWindowAsync
SetWindowPos
IsWindowVisible
IsIconic
GetSystemMetrics
SetForegroundWindow
GetWindowRect
AllowSetForegroundWindow
GetAncestor
GetKeyState
PtInRect
ReleaseDC
BeginPaint
EndPaint
GetWindowThreadProcessId
UnhookWindowsHookEx
MapVirtualKeyW
GetMessageW
DispatchMessageW
PeekMessageW
SetKeyboardState
UnregisterClassW
SystemParametersInfoW
PostQuitMessage
PostThreadMessageW
TranslateMessage
GetKeyboardState
MapVirtualKeyExW
AttachThreadInput
ToUnicode
GetGUIThreadInfo
OpenClipboard
SetRectEmpty
SetClipboardData
BitBlt
SaveDC
SetWindowOrgEx
GetStockObject
SetWindowExtEx
SetViewportExtEx
CreateRectRgn
SetViewportOrgEx
SelectClipRgn
RectInRegion
SetStretchBltMode
RestoreDC
SetMapMode
CreateBitmap
FillRgn
IntersectClipRect
SetRectRgn
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchDIBits
CreateRectRgnIndirect
GetRegionData
CombineRgn
CreatePatternBrush
GetObjectW
DeleteObject
CreateSolidBrush
DeleteDC
ExtCreateRegion
GetRgnBox
SetEntriesInAclW
RegSetValueExW
RegOpenCurrentUser
RevertToSelf
ImpersonateLoggedOnUser
StartServiceW
QueryServiceStatusEx
QueryServiceStatus
QueryServiceConfigW
EnumServicesStatusW
ControlService
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
FreeSid
EqualSid
DuplicateToken
OpenProcessToken
AllocateAndInitializeSid
CheckTokenMembership
SHGetKnownFolderPath
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteExW
SHCreateDirectoryExW
CoTaskMemFree
CoCreateInstance
SysFreeString
SysAllocString
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
??Bid@locale@std@@QAEIXZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
_Strxfrm
_Strcoll
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
_Cnd_destroy_in_situ
_Mtx_unlock
_Thrd_join
_Thrd_id
_Cnd_wait
_Cnd_do_broadcast_at_thread_exit
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_init_in_situ
_Cnd_signal
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
PathIsRelativeW
PathAppendW
PathAddBackslashW
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
GdiplusShutdown
GetModuleFileNameExW
GetProcessImageFileNameW
GetProcessImageFileNameA
wcsstr
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
__std_terminate
memmove
wcschr
memcpy
__std_exception_copy
__std_exception_destroy
memcmp
memchr
_purecall
_CxxThrowException
strchr
__CxxFrameHandler3
memset
__std_type_info_compare
ftell
fwrite
fflush
_wfsopen
__stdio_common_vsnprintf_s
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
__acrt_iob_func
__stdio_common_vfwprintf
fclose
fseek
_wfopen_s
wcscpy_s
wcsncpy_s
_wcsnicmp
_wcsupr_s
wcsncmp
strncpy_s
isdigit
strcpy_s
strcat_s
strnlen
_wcsicmp
wcscat_s
_recalloc
malloc
realloc
calloc
free
_callnewh
_errno
_beginthreadex
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
terminate
_invalid_parameter_noinfo
_cexit
_execute_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
strtoull
strtoll
_wtoi64
_wtoi
rand
_waccess_s
ord16
cpt_create_capturer
cpt_create_helper
cpt_create_viewer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ