Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5c963934d8bb0b5658171b0f3f3d46a0N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c963934d8bb0b5658171b0f3f3d46a0N.dll
Resource
win10v2004-20240802-en
Target
5c963934d8bb0b5658171b0f3f3d46a0N.exe
Size
2.6MB
MD5
5c963934d8bb0b5658171b0f3f3d46a0
SHA1
235bbd3d64b8922c84b0786896e3048cda397798
SHA256
fc8f2cb0d6c921e85c7b4cfac67eca675db3a54ac651e87f7b588dabde0c35c8
SHA512
382189418f546f63c04d11d2a1dbb01585a1e25666f3e1aa03aefaa3879163d765fed13a207ba1022057e264de977054e96f033ea9419c3d3d8c81dd05c8dbb9
SSDEEP
49152:srAhv/bODYYh++R6VHqjco9dx//LcYFJO7LvHU3sD+guT4osH0s7o90v:uYd+/j9PVY7LvHU3sD+ooyv
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\a\b\d_00000000_\b\b\execroot\k\bazel-out\x86_32-windows-opt\bin\component\crypto\crypto_components\crypto_components.pdb
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertOpenStore
CertAddStoreToCollection
GetModuleFileNameA
HeapFree
GetModuleHandleExA
GetLastError
RaiseException
HeapAlloc
GetProcAddress
GetProcessHeap
GetModuleHandleW
lstrlenA
CloseHandle
GetCurrentProcessId
ReadFile
GetFileSizeEx
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
WriteFile
LeaveCriticalSection
InitializeCriticalSection
FindClose
CreateFileW
SetFilePointerEx
LocalFree
DeleteCriticalSection
FlushFileBuffers
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetTempPathW
GetFileAttributesW
DeleteFileW
SwitchToThread
Sleep
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
MultiByteToWideChar
GetCurrentThreadId
GetModuleHandleA
lstrcmpA
WaitForSingleObject
CreateEventW
SetEvent
TerminateThread
WaitForSingleObjectEx
CreateThread
ResetEvent
GetTickCount
LoadLibraryW
GetModuleHandleExW
GetTimeZoneInformation
FileTimeToLocalFileTime
VerSetConditionMask
SystemTimeToFileTime
VerifyVersionInfoW
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingW
MapViewOfFile
MoveFileW
GetEnvironmentVariableW
FreeLibrary
GetModuleFileNameW
FindAtomW
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InitializeCriticalSectionAndSpinCount
wsprintfA
StgOpenStorageOnILockBytes
CoTaskMemFree
CoCreateGuid
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Xlength_error@std@@YAXPBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Init@ios_base@std@@IAEXXZ
??1ios_base@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?clear@ios_base@std@@QAEXH_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBEPBDPBD0PA_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?exceptions@ios_base@std@@QAEXH@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
?widen@?$ctype@D@std@@QBEDD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?__ExceptionPtrCreate@@YAXPAX@Z
_Mbrtowc
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?uncaught_exception@std@@YA_NXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
strchr
strstr
__std_type_info_compare
_CxxThrowException
memmove
memset
memcpy
__current_exception_context
__std_type_info_destroy_list
_except_handler4_common
strrchr
memchr
_purecall
memcmp
__current_exception
__CxxFrameHandler3
__std_terminate
__std_exception_destroy
__std_exception_copy
_callnewh
malloc
calloc
realloc
free
_itoa
strtoul
strtol
mbrtowc
strtoull
wcrtomb_s
_crt_atexit
terminate
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_errno
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
abort
exit
_ftelli64
__acrt_iob_func
fflush
fwrite
fread
_fseeki64
ferror
fclose
__stdio_common_vfprintf
_wfopen
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vsscanf
fopen
_getcwd
log2
_dclass
_CIfmod
floor
ceil
_CIlog10
_CIpow
frexp
tolower
isspace
toupper
isdigit
strncpy
isalnum
strncmp
isalpha
isupper
strpbrk
strcspn
strnlen
ispunct
strcpy_s
localeconv
bsearch
srand
_get_timezone
_mktime64
_time64
_difftime64
_stat64i32
_wstat64i32
getenv
ekaCanUnloadModule
ekaCreateObject
ekaGetObjectFactory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ