Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
01a9a9b156742cc772199c4fd42d0fae47859f18aaf31f124b1189e8663404ec.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
01a9a9b156742cc772199c4fd42d0fae47859f18aaf31f124b1189e8663404ec.exe
Resource
win10v2004-20220414-en
Target
01a9a9b156742cc772199c4fd42d0fae47859f18aaf31f124b1189e8663404ec
Size
4.3MB
MD5
a78c58bb3b45ee7e5866c89830c74d31
SHA1
fe388b20e1ae84152af170048fb8530dfa5302ca
SHA256
01a9a9b156742cc772199c4fd42d0fae47859f18aaf31f124b1189e8663404ec
SHA512
311de79ef817e7b5318366854c7ffa170e6459bd63a3b083aa29f3b8c0af129113377dcd6ca58e47a63320fe2242c775865559384072757ed4b585fd3e23475b
SSDEEP
98304:7W2hOvrURziGMszViZU8Yq0G5BS6IyU3R0TeB/16:7ovYRWHrPf0EATl3mTepU
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Zhuhai Kingsoft Office Software Co.\, Ltd.,O=Zhuhai Kingsoft Office Software Co.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Zhuhai Kingsoft Office Software Co.\, Ltd.,O=Zhuhai Kingsoft Office Software Co.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN
CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
WritePrivateProfileStringW
GetCommandLineW
GetTempFileNameW
CloseHandle
GetLastError
ExitProcess
FreeResource
GetModuleHandleW
lstrcpyW
GetLocaleInfoW
GetUserDefaultLangID
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
GetPrivateProfileIntW
GetPrivateProfileStringW
GetSystemTime
GetSystemDirectoryW
GetSystemWow64DirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
GetSystemPowerStatus
GetSystemDefaultUILanguage
GetSystemDefaultLCID
GetUserDefaultLCID
GetTickCount
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
MulDiv
GetLocalTime
GetCurrentProcessId
OpenProcess
GlobalAlloc
GlobalUnlock
GlobalLock
GetCurrentDirectoryW
GetModuleFileNameW
MultiByteToWideChar
CreateFileW
GetFileSize
ReadFile
LocalFree
FormatMessageW
CreateDirectoryW
GetFileType
SetFilePointer
SetFileTime
WriteFile
DuplicateHandle
GetCurrentProcess
DosDateTimeToFileTime
SystemTimeToFileTime
WideCharToMultiByte
VerSetConditionMask
OutputDebugStringA
OutputDebugStringW
WaitForSingleObject
CreateMutexW
OpenMutexW
GetExitCodeProcess
GetModuleHandleExW
VerifyVersionInfoW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetACP
SleepEx
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
QueryPerformanceCounter
MoveFileExA
CompareFileTime
GetSystemTimeAsFileTime
GetEnvironmentVariableA
GetStdHandle
PeekNamedPipe
WaitForMultipleObjects
SetLastError
FormatMessageA
VerifyVersionInfoA
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
CreateFileA
DeviceIoControl
CreateThread
CreateEventW
GetFileAttributesExW
GetFileSizeEx
SetEvent
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetCompressedFileSizeW
ReleaseMutex
FlushFileBuffers
MapViewOfFile
CreateFileMappingW
LockFileEx
CreateFileMappingA
UnlockFile
HeapCompact
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnmapViewOfFile
GetFileAttributesW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
LockFile
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
TryEnterCriticalSection
GetCurrentThreadId
IsDebuggerPresent
GetStringTypeW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
CompareStringW
LCMapStringW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
RtlUnwind
InterlockedPushEntrySList
LoadLibraryExW
GetCommandLineA
ExitThread
FreeLibraryAndExitThread
GetDriveTypeW
GetFileInformationByHandle
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
SetStdHandle
GetTimeZoneInformation
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
GetEnvironmentVariableW
SetConsoleMode
ReadConsoleA
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
FindFirstFileW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ