Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
12fa97bec63a6f4abec7f90b50bd736e0c16985b35e0f1fbb7d992b1ee79b7fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12fa97bec63a6f4abec7f90b50bd736e0c16985b35e0f1fbb7d992b1ee79b7fd.exe
Resource
win10v2004-20220812-en
Target
12fa97bec63a6f4abec7f90b50bd736e0c16985b35e0f1fbb7d992b1ee79b7fd
Size
841KB
MD5
53bef606852455b58416b90c2264cc9a
SHA1
844555826ccc2db73f0284d07feea04aa97cc54d
SHA256
12fa97bec63a6f4abec7f90b50bd736e0c16985b35e0f1fbb7d992b1ee79b7fd
SHA512
3ddc87097876e65e71c5faf61ce9b34567f2c20f64e939f35a13744b68ecceadb348183d7f0bc507b958b94b412a2d191f59ec1fd2cbfa94c9df4c1eecf0fbbb
SSDEEP
24576:kM9T0m2XiwXhNXeB2lQnv66KP58riIlQ:kM9gQshABuD648riI
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=深圳金奇异果科技有限公司,O=深圳金奇异果科技有限公司,L=深圳市,ST=广东省,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DeleteCriticalSection
FindFirstFileW
EnterCriticalSection
FindClose
LoadLibraryExW
FreeLibrary
lstrcmpiW
InterlockedIncrement
CreateMutexW
InterlockedDecrement
RaiseException
Sleep
GetDiskFreeSpaceExW
SetEvent
DeleteFileW
MoveFileExW
OpenEventW
FindNextFileW
RemoveDirectoryW
WriteFile
SystemTimeToFileTime
GetFileAttributesW
CreateDirectoryW
GetFileSize
Process32FirstW
Process32NextW
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
LocalFree
GetCurrentDirectoryW
SetFileTime
LocalFileTimeToFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObject
GetStartupInfoW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetPrivateProfileIntW
GetCurrentThreadId
GetLocalTime
LeaveCriticalSection
CloseHandle
ReadFile
CreateFileW
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
SetLastError
FindResourceExW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
GetVersion
GetFileType
GetStdHandle
GlobalMemoryStatus
LoadLibraryA
FlushConsoleInputBuffer
SleepEx
ExpandEnvironmentStringsA
FormatMessageA
InitializeCriticalSection
GetProcAddress
CreateEventW
GetTickCount
GetModuleFileNameW
LoadLibraryW
GetCurrentProcess
GetModuleHandleW
FindResourceW
SetFilePointer
GetLastError
IsDebuggerPresent
DestroyWindow
DefWindowProcW
CharNextW
UnregisterClassA
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
RegisterEventSourceA
DeregisterEventSource
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyW
RegCreateKeyExW
ReportEventA
SHCreateDirectoryExW
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoTaskMemRealloc
CoInitialize
VarUI4FromStr
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
PathAddBackslashW
PathRemoveBackslashW
PathFindFileNameW
SHGetValueW
InitCommonControlsEx
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
wcscspn
wcsspn
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_wtoi
_recalloc
calloc
_time32
free
??_V@YAXPAX@Z
_wcslwr_s
_wfopen
fread
fwrite
feof
fclose
fwprintf
fflush
_purecall
memset
srand
_time64
wcscmp
_beginthreadex
wcsncpy_s
_wcsicmp
malloc
_wcsupr_s
_endthreadex
wcschr
wcsrchr
wcscat_s
rand
wcscpy_s
wcscat
memmove_s
strlen
_vswprintf
iswspace
wcsstr
memmove
strncmp
strcmp
wcsncpy
memcpy
fseek
fprintf
atoi
fputc
ferror
fopen_s
_vsnprintf_s
ftell
isspace
strchr
isalnum
tolower
isalpha
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
sscanf
strtoul
vswprintf_s
_vscwprintf
wcslen
??3@YAXPAX@Z
getenv
_vsnprintf
raise
__iob_func
strncpy
strerror
realloc
qsort
isdigit
fopen
_setmode
_fileno
fgets
_errno
_strnicmp
isxdigit
_gmtime64
isupper
memchr
_stricmp
strtol
fputs
signal
_getch
strrchr
sprintf
strstr
_strtoi64
__sys_nerr
_stat64
_strdup
__CxxFrameHandler3
memcpy_s
_CxxThrowException
getsockopt
WSACleanup
WSAStartup
getpeername
setsockopt
select
ioctlsocket
closesocket
WSAGetLastError
recv
send
getsockname
ntohs
bind
connect
socket
WSASetLastError
freeaddrinfo
__WSAFDIsSet
htons
getaddrinfo
GetModuleFileNameExW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ