Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f12a5a9ecec6e5169909c595388bb4793fe3c82b954973e6dc8da35cadba5002.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f12a5a9ecec6e5169909c595388bb4793fe3c82b954973e6dc8da35cadba5002.exe
Resource
win10v2004-20240802-en
Target
f12a5a9ecec6e5169909c595388bb4793fe3c82b954973e6dc8da35cadba5002
Size
2.5MB
MD5
c1d4b6434f11df6f2740a397d5f4c9ce
SHA1
e38e527f8edcb2895bd88de47b167b2fb69884bc
SHA256
f12a5a9ecec6e5169909c595388bb4793fe3c82b954973e6dc8da35cadba5002
SHA512
a92ca97bd5228b152f02a8ba8c8e497ed3846a1554dcfb1d57fb3d659e451e7581cc45f4faa8a5df071b7969d9a12c3235282dd95eccc481bd9791fb18073cae
SSDEEP
49152:Sj8QjBeCH5E0sbkuhNuEqTTlXYLPG5u6tsLVHXy0w+Y:AnteCHnsbkV/loi5uc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ReadConsoleA
GetSystemTime
SystemTimeToFileTime
ExitThread
FreeLibraryAndExitThread
FindResourceW
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
LoadLibraryExW
FreeLibrary
FindFirstFileW
FindNextFileW
GetThreadTimes
SetConsoleMode
ConvertThreadToFiber
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
SizeofResource
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
FileTimeToSystemTime
GetLongPathNameW
GetEnvironmentVariableW
GetDriveTypeW
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
WTSGetActiveConsoleSessionId
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
HeapAlloc
HeapFree
GetProcessHeap
OpenProcess
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetTickCount
HeapReAlloc
HeapSize
ReleaseMutex
CreateMutexW
GetWindowsDirectoryW
LockResource
GlobalLock
GlobalUnlock
VerSetConditionMask
SetErrorMode
SystemTimeToTzSpecificLocalTime
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
SetLastError
ExitProcess
GetModuleHandleExW
GetACP
GetFullPathNameW
FindFirstFileExW
GetFileType
PeekNamedPipe
GetCurrentThread
GetStringTypeW
CompareStringW
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetConsoleCtrlHandler
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
ReadConsoleW
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
GetCurrentDirectoryW
WriteConsoleW
SetEndOfFile
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
VerifyVersionInfoA
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
ExpandEnvironmentStringsA
WaitForMultipleObjects
SleepEx
InitializeCriticalSection
FormatMessageA
FindClose
CreateThread
GetStdHandle
WriteFile
OutputDebugStringW
LoadResource
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
GetProcAddress
GetModuleHandleW
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
ReadFile
GetFileSize
CopyFileW
DeleteFileW
GetModuleFileNameW
MapViewOfFile
MoveFileExW
GetCurrentProcessId
CreateFileW
GetTempPathW
CreateFileMappingW
OpenFileMappingW
CloseHandle
UnmapViewOfFile
WritePrivateProfileStringW
GetStartupInfoW
GetPrivateProfileStringW
RegisterClassExW
DefWindowProcW
CreateWindowExW
LoadCursorW
GetWindowRect
MoveWindow
ShowWindow
SetWindowPos
ClientToScreen
GetUserObjectInformationW
GetProcessWindowStation
PostQuitMessage
IsWindowVisible
DestroyWindow
MessageBoxW
FindWindowW
PostMessageW
CharNextW
PostThreadMessageW
GetMessageW
SendMessageW
IsWindow
GetWindowThreadProcessId
GetWindowLongW
SetWindowLongW
FindWindowExW
GetTextExtentPoint32W
SelectObject
SetBkMode
DeleteObject
CreateCompatibleDC
DeleteDC
CreateDIBSection
InitializeAcl
EqualSid
RegQueryValueExW
DuplicateTokenEx
LookupAccountSidW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
OpenProcessToken
ImpersonateLoggedOnUser
RevertToSelf
GetAclInformation
AddAce
GetAce
AddAccessAllowedAce
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
LookupAccountNameW
GetLengthSid
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CoTaskMemRealloc
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
VarUI4FromStr
PathFileExistsW
PathAddBackslashW
URLDownloadToFileW
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PB_WPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?Term@CPaintManagerUI@DuiLib@@SAXXZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?ShowModal@CWindowWnd@DuiLib@@QAEIXZ
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?GetFont@CPaintManagerUI@DuiLib@@QAEPAUHFONT__@@H@Z
?GetPaintDC@CPaintManagerUI@DuiLib@@QBEPAUHDC__@@XZ
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetFont@CLabelUI@DuiLib@@QBEHXZ
?GetAt@CStdPtrArray@DuiLib@@QBEPAXH@Z
?GetSize@CStdPtrArray@DuiLib@@QBEHXZ
?GetOptionGroup@CPaintManagerUI@DuiLib@@QAEPAVCStdPtrArray@2@PB_W@Z
?SetBkImage@CControlUI@DuiLib@@QAEXPB_W@Z
?IsSelected@COptionUI@DuiLib@@QBE_NXZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@UtagPOINT@@@Z
?GetFocus@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@XZ
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetLength@CDuiString@DuiLib@@QBEHXZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?SetIcon@CWindowWnd@DuiLib@@QAEXI@Z
??1CDialogBuilder@DuiLib@@QAE@XZ
?GetResourceID@WindowImplBase@DuiLib@@UBEPB_WXZ
?GetResourceType@WindowImplBase@DuiLib@@UBE?AW4UILIB_RESOURCETYPE@2@XZ
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?FindSubControl@CContainerUI@DuiLib@@QAEPAVCControlUI@2@PB_W@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
??0CDialogBuilder@DuiLib@@QAE@XZ
??BCDuiString@DuiLib@@QBEPB_WXZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??1CDuiString@DuiLib@@QAE@XZ
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?GetTextStyle@CLabelUI@DuiLib@@QBEIXZ
?SetTextStyle@CLabelUI@DuiLib@@QAEXI@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
WTSQueryUserToken
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
SHGetFolderPathW
ShellExecuteW
GetModuleFileNameExW
ord33
ord35
ord79
ord30
ord301
ord32
ord143
ord46
ord211
ord60
ord50
ord41
ord22
ord26
ord27
ord200
freeaddrinfo
getaddrinfo
recvfrom
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
gethostname
send
recv
WSACleanup
WSAStartup
ioctlsocket
listen
WSAIoctl
accept
sendto
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipFree
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFromHDC
GdipDeleteGraphics
GdipAlloc
GdipGetImageHeight
GdipDrawImageRectRectI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE