Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
BAAAAA.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
BAAAAA.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
FAAAAA.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
FAAAAA.dll
Resource
win10v2004-20240802-en
Target
5dde13ec6c0a493e67e6530786371bf0N.cab
Size
304KB
MD5
5dde13ec6c0a493e67e6530786371bf0
SHA1
764379b26794e3f4ee9168f9a22300b04b891d85
SHA256
9954af62ef7f3cafbce8833b3f3c90c40d26a504741bd2596996cde7bbd71e98
SHA512
a8fa931514183e440816a10f6b35b32208e4cebc1045d6e047448a45a36842e0659e5367aa31e621f63bc8fb0e128ae467298b532414379b4e99c3d4231f6f56
SSDEEP
6144:3F3wfciwbDXYsCynZIoRPgLC9Dg//pXbkwlEUfz0Cn1XCPZ26q9T4VdtzE3vb:3F3w8bDXOdoRkCBIL0e1X2Z260T6tzEz
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\perforce\ActiveXContainer\dev\lvcons\NICont\x64\Release\nicont.pdb
IsDBCSLeadByte
GetUserDefaultLCID
DeleteFileA
GetTempPathW
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FindResourceA
WaitForSingleObjectEx
ResetEvent
SetEvent
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
OutputDebugStringW
IsDebuggerPresent
GetSystemTimeAsFileTime
lstrcmpiA
SizeofResource
LoadResource
LoadLibraryExA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
DisableThreadLibraryCalls
EncodePointer
OpenFile
GetFileTime
CompareFileTime
ExpandEnvironmentStringsA
GlobalUnlock
GlobalLock
WriteFile
ReadFile
GetFileInformationByHandle
CreateFileA
LeaveCriticalSection
EnterCriticalSection
SetLastError
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetCurrentThreadId
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpyA
MulDiv
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
CreateEventW
DecodePointer
CreateWindowExA
GetClassInfoExA
RegisterClassExA
CallWindowProcA
DefWindowProcA
PostMessageA
CharNextW
CharNextA
UnregisterClassA
GetDC
ReleaseDC
GetSysColor
CopyRect
InflateRect
wsprintfA
SendMessageA
IsWindow
IsChild
ShowWindow
MoveWindow
SetWindowPos
CreateDialogParamA
DialogBoxParamA
EndDialog
GetDlgItem
EnableWindow
GetSystemMetrics
SetWindowTextA
GetClientRect
GetWindowRect
ScreenToClient
OffsetRect
SetWindowLongPtrA
GetKeyState
SetFocus
GetActiveWindow
GetFocus
IsWindowEnabled
CopyAcceleratorTableA
BeginPaint
EndPaint
SetWindowRgn
InvalidateRect
InvalidateRgn
MapWindowPoints
FillRect
IntersectRect
IsRectEmpty
GetWindowLongA
GetWindowLongPtrA
SetParent
GetWindow
LoadCursorA
GetCursorPos
PtInRect
DispatchMessageA
WindowFromPoint
DestroyWindow
SetBkColor
SetMapMode
SetTextColor
DPtoLP
LPtoDP
SetViewportOrgEx
CombineRgn
CreateRectRgnIndirect
SelectObject
OffsetRgn
CloseEnhMetaFile
CreateEnhMetaFileA
DeleteEnhMetaFile
SetWindowExtEx
SetWindowOrgEx
PtInRegion
PatBlt
GetMapMode
GetDeviceCaps
BitBlt
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreatePatternBrush
CreateSolidBrush
DeleteObject
DeleteDC
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryInfoKeyW
OleSave
OleIsRunning
OleRun
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleCreate
WriteClassStm
ReadClassStm
WriteClassStg
ReadClassStg
CoTaskMemRealloc
StringFromCLSID
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfileOnILockBytes
StgCreateDocfile
CLSIDFromString
GetHGlobalFromStream
CreateStreamOnHGlobal
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
OleDoAutoConvert
OleRegGetMiscStatus
StringFromGUID2
CoGetClassObject
RegisterTypeLi
VarUI4FromStr
OleLoadPicture
CreateTypeLib2
LoadTypeLi
VarBstrCmp
SysStringLen
SysFreeString
UnRegisterTypeLi
SysAllocString
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
OleTranslateColor
OleCreatePictureIndirect
SysAllocStringLen
OleCreateFontIndirect
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
__C_specific_handler
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
__vcrt_InitializeCriticalSectionEx
__std_terminate
memcpy
memset
__CxxFrameHandler3
_CxxThrowException
_purecall
memcmp
memmove
malloc
_recalloc
_callnewh
free
atof
atol
_itoa
wcstombs
toupper
isalpha
strcat_s
strcpy_s
wcsncpy_s
strncpy
wcscpy
tolower
strlen
wcslen
_wcsicmp
labs
_invalid_parameter_noinfo_noreturn
_errno
terminate
_initterm
_cexit
_initterm_e
_resetstkoflw
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initialize_narrow_environment
__stdio_common_vsprintf_s
__stdio_common_vswprintf
_mbsnbcpy_s
_mbsstr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\perforce\ActiveXContainer\dev\lvcons\NIContDT\x64\Release\nicontdt.pdb
SetEvent
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
ResetEvent
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
OutputDebugStringW
IsDebuggerPresent
InitializeCriticalSection
lstrcpynA
GetVersionExA
MulDiv
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GlobalFree
GlobalAlloc
LoadLibraryA
GetUserDefaultLCID
ExpandEnvironmentStringsA
IsDBCSLeadByte
FindResourceA
lstrcmpiA
SizeofResource
LoadResource
LoadLibraryExA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
DisableThreadLibraryCalls
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
RaiseException
GlobalUnlock
GlobalLock
WriteFile
ReadFile
GetFileInformationByHandle
CreateFileA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetCurrentThreadId
GetLastError
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpyA
InterlockedPushEntrySList
GetKeyState
SendMessageA
UnregisterClassA
RegisterClassExA
GetClassLongPtrA
CreateWindowExA
IsWindow
InvalidateRect
SetWindowLongPtrA
GetClassNameA
GetWindowPlacement
IsIconic
DrawStateA
IntersectRect
GetIconInfo
SetWindowTextA
DrawIconEx
wsprintfA
InflateRect
CopyRect
GetSysColor
ReleaseDC
GetDC
GetWindowTextA
GetCursorPos
GetWindowTextLengthA
GetWindowRect
ClientToScreen
ScreenToClient
MapWindowPoints
PtInRect
GetWindowLongPtrA
GetParent
SetParent
CharNextA
CharNextW
DrawEdge
DrawTextA
BeginPaint
EndPaint
GetClientRect
SetCursor
GetSysColorBrush
GetWindow
ScrollWindowEx
FillRect
SetScrollInfo
GetScrollInfo
LoadStringA
EndDialog
GetFocus
GetWindowDC
DrawFocusRect
FrameRect
OffsetRect
GetWindowLongA
RegisterWindowMessageA
DialogBoxIndirectParamA
GetDlgItem
GetActiveWindow
GetAsyncKeyState
IsWindowEnabled
GetForegroundWindow
SetRect
SystemParametersInfoA
GetDlgCtrlID
GetClassInfoExA
LoadCursorA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
DrawFrameControl
PostMessageA
DefWindowProcA
CallWindowProcA
IsChild
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
IsWindowVisible
SetFocus
GetCapture
SetCapture
ReleaseCapture
GetSystemMetrics
UpdateWindow
GetScrollPos
DPtoLP
LPtoDP
SetViewportOrgEx
CombineRgn
CreateRectRgnIndirect
GetTextExtentPoint32A
SetPixel
GetTextMetricsA
GetStockObject
LineTo
PaintRgn
MoveToEx
TextOutA
CreatePen
GetTextColor
SetTextColor
CreateSolidBrush
GetObjectA
CreateFontIndirectA
CreatePalette
Rectangle
RealizePalette
SelectPalette
SetBkMode
ExtTextOutA
SetMapMode
SetBkColor
CreateRectRgn
GetDCOrgEx
StretchBlt
GetClipBox
GetBkColor
ExcludeClipRect
CreateBitmap
BitBlt
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreatePatternBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetMapMode
PatBlt
CreateDIBitmap
SelectClipRgn
SelectObject
ChooseFontA
GetOpenFileNameA
ChooseColorA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryInfoKeyW
OleSave
CLSIDFromProgID
ProgIDFromCLSID
StringFromCLSID
OleRegGetUserType
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfileOnILockBytes
CLSIDFromString
GetHGlobalFromStream
CreateStreamOnHGlobal
OleDoAutoConvert
OleRegGetMiscStatus
StringFromGUID2
CoGetClassObject
StgCreateDocfile
UnRegisterTypeLi
SysAllocStringLen
QueryPathOfRegTypeLi
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
OleCreateFontIndirect
OleTranslateColor
SysStringLen
SysAllocString
OleLoadPicture
SysFreeString
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
__std_exception_destroy
memcpy
_CxxThrowException
__std_type_info_destroy_list
__vcrt_InitializeCriticalSectionEx
memmove
__CxxFrameHandler3
memset
_purecall
memcmp
__std_terminate
__C_specific_handler
strstr
__std_exception_copy
atol
_itoa
atof
towlower
iswdigit
strcmp
strcpy
wcscpy
wcslen
strcat_s
strcpy_s
wcsncpy_s
iswprint
_wcsicmp
strlen
labs
_initterm
_initterm_e
_resetstkoflw
_crt_atexit
terminate
_invalid_parameter_noinfo
_errno
_register_onexit_function
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_crt_at_quick_exit
free
_callnewh
_recalloc
malloc
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__stdio_common_vsprintf
_mbsstr
_mbsnbcpy_s
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ