Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2b65449806f7d2191a0b4f5331010f0e16489889fa01c2bd342ca1a9722d1cfeN.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2b65449806f7d2191a0b4f5331010f0e16489889fa01c2bd342ca1a9722d1cfeN.dll
Resource
win10v2004-20241007-en
Target
2b65449806f7d2191a0b4f5331010f0e16489889fa01c2bd342ca1a9722d1cfeN
Size
168KB
MD5
b6c101bb4ba02b15f3f89826a34c08f0
SHA1
d566a59dcc0a89f11ac6eb9896e7143a7f18adfc
SHA256
2b65449806f7d2191a0b4f5331010f0e16489889fa01c2bd342ca1a9722d1cfe
SHA512
5f98b8306ced8f91b193c4008537ce5ac64902e11863f412e4d257e2e9d38ecd60952914fd6ac1f3908cfec1f2ae26073ce545b4b21a9d0a2ae945d225343698
SSDEEP
3072:igEnSCk5vlh9B/kRftv1qBTvi23PAF05JjxVAdIIAf5kW3:igEnSCk5vH/kRNcK2YghxVAC3
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\build\cpython36\PCBuild\amd64\_elementtree.pdb
GetModuleHandleA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
RtlCaptureContext
PyModule_AddObject
_PyArg_ParseTuple_SizeT
PyObject_GC_Del
PyObject_CallFunctionObjArgs
_PyBytes_Resize
PyObject_ClearWeakRefs
_PyTrash_thread_destroy_chain
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyObject_GetBuffer
PySequence_Fast
PyList_New
PyModule_Create2
PyType_Ready
PyExc_SyntaxError
PyObject_GetAttrString
PyErr_NewException
PyErr_Clear
PyList_Append
PyBytes_Type
PyObject_RichCompareBool
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyMem_Free
PyExc_StopIteration
PyObject_Free
PyCapsule_Import
PyList_Type
PyErr_NoMemory
PyObject_Realloc
PyDict_GetItem
_PyArg_ParseStack_SizeT
PyObject_GC_Track
PyBytes_FromStringAndSize
Py_ReprLeave
PyDict_DelItem
PyNumber_AsSsize_t
Py_ReprEnter
PyExc_TypeError
PyMem_Realloc
_PyTrash_thread_deposit_object
PyObject_IsTrue
PyDict_Copy
PyTuple_Pack
_PyUnicode_Ready
PyMem_Malloc
PyExc_IndexError
PyExc_ImportError
PyState_FindModule
PyArg_UnpackTuple
PyModule_GetState
_PyArg_ParseTupleAndKeywordsFast_SizeT
_PyObject_GC_New
PyList_SetItem
_PyObject_FastCallDict
PyDict_Keys
PyUnicode_FromString
PyBuffer_Release
PyUnicode_FromStringAndSize
PySequence_Size
PyExc_OverflowError
PyUnicode_Join
_PyObject_CallMethodId_SizeT
PyType_IsSubtype
PyDict_Type
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyDict_Next
PyExc_ValueError
PyErr_SetString
PyList_Size
PyUnicode_New
PyExc_AttributeError
PyDict_Items
PyDict_Size
PyTuple_New
_Py_NoneStruct
PyErr_SetNone
PyObject_GC_UnTrack
PySlice_Unpack
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
PyUnicode_AsUTF8AndSize
PyObject_GenericGetAttr
PyErr_ExceptionMatches
_PyUnicode_EqualToASCIIString
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PyDict_Update
PyObject_SelfIter
PyImport_ImportModule
PySlice_Type
PyExc_DeprecationWarning
PyErr_WarnEx
PyObject_Malloc
_PyObject_SetAttrId
_PyObject_CallFunction_SizeT
_Py_BuildValue_SizeT
PyErr_SetObject
PySlice_AdjustIndices
PyThreadState_Get
PyCFunction_Type
_PyArg_Parse_SizeT
PyUnicode_AsEncodedString
PyType_GenericAlloc
memcpy
memcmp
__C_specific_handler
__std_type_info_destroy_list
memmove
memset
strpbrk
strncat
strcmp
realloc
free
malloc
__acrt_iob_func
__stdio_common_vfprintf
getenv
_initialize_narrow_environment
_configure_narrow_argv
_register_onexit_function
_initterm_e
_initterm
terminate
_execute_onexit_table
_crt_atexit
_initialize_onexit_table
_cexit
_crt_at_quick_exit
_seh_filter_dll
PyInit__elementtree
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ