Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
项目信息/WzComAddrBook64.dll
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
项目信息/WzComAddrBook64.dll
Resource
win10v2004-20220721-en
Behavioral task
behavioral3
Sample
项目信息/项目信息.docx.exe
Resource
win7-20220715-en
Behavioral task
behavioral4
Sample
项目信息/项目信息.docx.exe
Resource
win10v2004-20220721-en
Target
a7b2f3030ef02325d687cae222e017641d53a007266e106c6d35b2b2f229750b
Size
441KB
MD5
d51d9d75e3095786ba3f8e5f3191bad8
SHA1
4374af5d8407917c94b48a652503c585d248fc64
SHA256
a7b2f3030ef02325d687cae222e017641d53a007266e106c6d35b2b2f229750b
SHA512
047314dc795ad57ca1a32cededd1e175e0c709c1da4e0d67dcb0b96a4aa6032109d5025c6c6611dea07b0e2fadd3178b144b684e9d6f1d55b48039b11d29001e
SSDEEP
12288:ZrG8ZLpWnKtf1p61WF0Tan0SodxWCbhduri:I8ZsKttQQ8andw14ri
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetLastError
CreateFileA
OutputDebugStringA
GetModuleFileNameA
ExitProcess
CloseHandle
ReadFile
VirtualAlloc
GetFileSize
Sleep
CreateThread
VirtualProtect
GetModuleHandleA
WriteConsoleW
CreateFileW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
RaiseException
ShellExecuteA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PathRemoveFileSpecW
VerSetConditionMask
GetModuleHandleW
VerifyVersionInfoW
SetLastError
GetSystemDirectoryW
GetWindowsDirectoryW
WaitForSingleObjectEx
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
GetFileType
SetFilePointerEx
WriteFile
QueryPerformanceCounter
CreateEventA
ResetEvent
GetCurrentProcessId
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
GetConsoleMode
GetConsoleCP
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FindFirstFileExW
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetCPInfo
FreeLibrary
LocalFree
GetProcAddress
CreateThread
LoadLibraryW
CloseHandle
SetEvent
GetLastError
CreateMutexW
GetUserDefaultUILanguage
GetModuleFileNameW
GetCommandLineW
SwitchToThread
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
GetModuleHandleExW
WriteConsoleW
ExitProcess
PostQuitMessage
LoadCursorW
LoadIconW
CreateWindowExW
GetMessageW
DefWindowProcW
PostMessageW
RegisterClassExW
DispatchMessageW
TranslateMessage
RegSetValueExW
RegOpenKeyW
RegCreateKeyW
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
CommandLineToArgvW
CoUninitialize
CoInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ