Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1f856e87de95f73f6e7848473c62cb9868ec70a0d01686f56a9bbedceb89170fN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1f856e87de95f73f6e7848473c62cb9868ec70a0d01686f56a9bbedceb89170fN.dll
Resource
win10v2004-20240910-en
Target
1f856e87de95f73f6e7848473c62cb9868ec70a0d01686f56a9bbedceb89170fN
Size
85KB
MD5
7ef49a648488189e84785031e5233980
SHA1
fcdb8d02a04a664afbc901aef516d4bde9cc48f3
SHA256
1f856e87de95f73f6e7848473c62cb9868ec70a0d01686f56a9bbedceb89170f
SHA512
98c379ec0e538e7d92c93d374b4b3f7da8c282a4b4865c82b1626abccadfb5d13b458d15af6260ec8d644e9d2a8ab596f270f274bfe61e289bd5a9e37e424b02
SSDEEP
1536:PNIT2eKMgk5uuSPj1may+f5rIvdh3WypYgfTIR7G+nCrpa17TPxv50:VOjgk5uuIMa7fodh3VtkR7G+nCrpa1fk
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
OutputDebugStringW
GetCurrentProcessId
MoveFileW
CreateFileW
GetFileAttributesW
GetFileSize
ReadFile
HeapCreate
DebugBreak
CloseHandle
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexW
Sleep
LocalFree
CopyFileW
GetCurrentProcess
IsProcessorFeaturePresent
WriteFile
CompareStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
TerminateProcess
MessageBoxW
CharLowerW
ConvertStringSecurityDescriptorToSecurityDescriptorW
NXStringSetHeap
NXStringMalloc
NXStringRelease
NXStringCreateWithUTF16
NXStringCreateWithBytes
NXStringRetain
?_Xlength_error@std@@YAXPBD@Z
memcmp
memset
wcschr
wcsstr
__CxxFrameHandler3
strchr
_CxxThrowException
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
memmove
__RTDynamicCast
memcpy
strstr
realloc
_callnewh
calloc
free
malloc
_invalid_parameter_noinfo_noreturn
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
terminate
_cexit
wcsncpy
iswxdigit
_wcsicmp
wcstol
_wtoi
_wtoi64
_mktime64
_time64
_localtime64
__stdio_common_vswprintf
??0LinkedListEntry@@QAE@ABV0@@Z
??0LinkedListEntry@@QAE@XZ
??0Scanner@@QAE@ABV0@@Z
??0Scanner@@QAE@PAVTable@@@Z
??1LinkedListEntry@@UAE@XZ
??1Scanner@@MAE@XZ
??4LinkedListEntry@@QAEAAV0@ABV0@@Z
??4Scanner@@QAEAAV0@ABV0@@Z
??_7LinkedListEntry@@6B@
??_7Scanner@@6B@
?AddFilterById@Scanner@@QAEHEPAVField@@E@Z
?AddFilterByName@Scanner@@QAEHPB_WPAVField@@E@Z
?AddFilterOp@Scanner@@QAEHE@Z
?Bof@Scanner@@QAEHXZ
?CacheLastLocate@Scanner@@IAEXHHPAVField@@PAVIndex@@H@Z
?Cancel@Scanner@@QAEXXZ
?CheckFilters@Scanner@@IAEHXZ
?CheckIndexing@Table@@QAEHXZ
?ClearDirtyBit@Scanner@@QAEXXZ
?Delete@Scanner@@QAEXXZ
?DeleteField@Scanner@@QAEXPAVField@@@Z
?DeleteFieldById@Scanner@@QAEXE@Z
?DeleteFieldByName@Scanner@@QAEXPB_W@Z
?Edit@Scanner@@QAEXXZ
?EnableRowCache@Table@@QAEXXZ
?Eof@Scanner@@QAEHXZ
?First@Scanner@@QAEXPAH@Z
?FragmentationLevel@Scanner@@QAEMXZ
?GetColumnById@Scanner@@QAEPAVColumnField@@E@Z
?GetColumnByName@Scanner@@QAEPAVColumnField@@PB_W@Z
?GetColumns@Table@@QAEPAVRecord@@XZ
?GetCurrentRecord@Scanner@@IAEXXZ
?GetFieldById@Scanner@@QAEPAVField@@E@Z
?GetFieldByName@Scanner@@QAEPAVField@@PB_W@Z
?GetIndex@Scanner@@QAEPAVIndex@@XZ
?GetLastFilter@Scanner@@QAEPAVFilter@@XZ
?GetLastQuery@Scanner@@QAEPB_WXZ
?GetNext@LinkedListEntry@@QBEPAV1@XZ
?GetPrevious@LinkedListEntry@@QBEPAV1@XZ
?GetRecord@Scanner@@QAEPAVRecord@@H@Z
?GetRecordById@Scanner@@QAEXHH@Z
?GetRecordId@Scanner@@QAEHXZ
?GetRecordsCount@Scanner@@QAEHXZ
?GetTable@Scanner@@QAEPAVTable@@XZ
?HasIndexChanged@Scanner@@QAEHXZ
?IndexModified@Scanner@@QAEXXZ
?Insert@Scanner@@QAEXXZ
?Last@Scanner@@QAEXPAH@Z
?LocateById@Scanner@@QAEHHHPAVField@@PAH@Z
?LocateByIdEx@Scanner@@QAEHHHPAVField@@PAHH@Z
?LocateByName@Scanner@@QAEHPB_WHPAVField@@PAH@Z
?MatchFilter@Scanner@@QAE_NPAVFilter@@@Z
?MatchFilters@Scanner@@IAE_NXZ
?MatchSearch@Scanner@@IAE_NABV?$set@EU?$less@E@std@@V?$allocator@E@2@@std@@PAVStringField@@@Z
?MatchSearches@Scanner@@IAE_NXZ
?New@Scanner@@QAEXXZ
?NewFieldById@Scanner@@QAEPAVField@@EE@Z
?NewFieldByName@Scanner@@QAEPAVField@@PB_WE@Z
?NewFieldByType@Scanner@@QAEPAVField@@EEE@Z
?Next@Scanner@@QAEHPAH@Z
?Post@Scanner@@QAEXXZ
?Previous@Scanner@@QAEHPAH@Z
?Query@Scanner@@QAEHPB_W@Z
?Query_CleanUp@Scanner@@IAEXXZ
?Query_EatSpace@Scanner@@SAPB_WPB_W@Z
?Query_GetNextToken@Scanner@@SAHPB_WPAHPAPA_WH@Z
?Query_LookupToken@Scanner@@KAHPB_W@Z
?Query_Parse@Scanner@@QAEHPB_W@Z
?Query_ProbeAlphaNum@Scanner@@SAPA_WPA_W@Z
?Query_ProbeNonAlphaNum@Scanner@@SAPB_WPB_W@Z
?Query_ProbeSpace@Scanner@@SAPA_WPA_W@Z
?Query_SyntaxError@Scanner@@IAEXH@Z
?Query_isControlChar@Scanner@@SAH_W@Z
?RemoveFilters@Scanner@@QAEXXZ
?Search@Scanner@@QAEXPB_W@Z
?SetWorkingIndexById@Scanner@@QAEHE@Z
?SetWorkingIndexByName@Scanner@@QAEHPB_W@Z
?WalkFields@Record@@QAEXP6A_NPAV1@PAVField@@PAX@Z2@Z
?WalkFields@Scanner@@QAEXP6A_NPAVRecord@@PAVField@@PAX@Z2@Z
?WalkFilters@Scanner@@QAEXP6A_NPAV1@PAVFilter@@PAX@Z2@Z
NDE_BinaryField_GetData
NDE_BinaryField_SetData
NDE_ColumnField_GetDataType
NDE_ColumnField_GetFieldID
NDE_ColumnField_GetFieldName
NDE_CreateDatabase
NDE_Database_CloseTable
NDE_Database_OpenTable
NDE_DestroyDatabase
NDE_Field_GetID
NDE_Field_GetType
NDE_Filter_GetData
NDE_Filter_GetID
NDE_Filter_GetOp
NDE_Init
NDE_Int128Field_SetValue
NDE_Int64Field_Create
NDE_Int64Field_GetValue
NDE_Int64Field_SetValue
NDE_IntegerField_Create
NDE_IntegerField_GetValue
NDE_IntegerField_SetValue
NDE_Quit
NDE_Scanner_AddFilterByID
NDE_Scanner_BOF
NDE_Scanner_Delete
NDE_Scanner_DeleteField
NDE_Scanner_EOF
NDE_Scanner_Edit
NDE_Scanner_First
NDE_Scanner_GetFieldByID
NDE_Scanner_GetFieldByName
NDE_Scanner_GetLastQuery
NDE_Scanner_GetRecordsCount
NDE_Scanner_LocateField
NDE_Scanner_LocateFilename
NDE_Scanner_LocateInteger
NDE_Scanner_LocateNDEFilename
NDE_Scanner_LocateNDEString
NDE_Scanner_LocateString
NDE_Scanner_New
NDE_Scanner_NewFieldByID
NDE_Scanner_NewFieldByName
NDE_Scanner_NewFieldByType
NDE_Scanner_Next
NDE_Scanner_Post
NDE_Scanner_Query
NDE_Scanner_RemoveFilters
NDE_Scanner_Search
NDE_Scanner_WalkFields
NDE_StringField_GetString
NDE_StringField_SetNDEString
NDE_StringField_SetString
NDE_Table_AddIndexByID
NDE_Table_AddIndexByIDW
NDE_Table_Compact
NDE_Table_CreateScanner
NDE_Table_DestroyScanner
NDE_Table_GetColumnByID
NDE_Table_GetColumnByName
NDE_Table_GetRecordsCount
NDE_Table_NewColumn
NDE_Table_NewColumnW
NDE_Table_PostColumns
NDE_Table_SetColumnSearchableByID
NDE_Table_Sync
NDE_Time_ApplyConversion
nde_wcsicmp_fn
ndestring_get_string
ndestring_malloc
ndestring_release
ndestring_retain
ndestring_wcsdup
ndestring_wcsndup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ