Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
5c0186c33256ba4753c7782309e014e5ecd1d46481be26f1c44aa90bfbc185fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c0186c33256ba4753c7782309e014e5ecd1d46481be26f1c44aa90bfbc185fc.exe
Resource
win10v2004-20220812-en
Target
5c0186c33256ba4753c7782309e014e5ecd1d46481be26f1c44aa90bfbc185fc
Size
2.9MB
MD5
08d6b830b9e25e1e194f5b0d7442c2cd
SHA1
d20cb99321c39ed77ee54c41e87f5db9178d3bdf
SHA256
5c0186c33256ba4753c7782309e014e5ecd1d46481be26f1c44aa90bfbc185fc
SHA512
3a98368fffb235152d5e7fb73a73df408459e5a1405cb608f26e3c2146b787fc966cc0a7b8c19f99c440fa8400bb04328efb1175ac759842c47bfb918dfb608f
SSDEEP
49152:R69Bn8kDdVW+Tdcolq047E6HWy1SEaN0ZuI1HUEQnofR84Pc:k9Bn8khxejVaiLH5QnofeN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=南京晨曦网络科技有限公司,OU=行政,O=南京晨曦网络科技有限公司,L=南京市,ST=江苏省,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetNativeSystemInfo
TryEnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
lstrcpynW
GetSystemTimeAsFileTime
GetModuleHandleA
LoadLibraryA
GetVersionExA
LoadLibraryW
GetVersionExW
FindFirstFileW
GetFullPathNameW
FindClose
FreeResource
GetCurrentThreadId
GetCurrentProcess
HeapCreate
FlushInstructionCache
GetFileAttributesW
RaiseException
DecodePointer
OutputDebugStringA
ExpandEnvironmentStringsW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
GetTickCount
GetCurrentDirectoryW
MulDiv
SetCurrentDirectoryW
GetModuleHandleExW
CreateSemaphoreW
Sleep
WaitForSingleObject
CreateThread
lstrcmpiW
GetShortPathNameW
lstrcpyW
LocalAlloc
CreateFileW
SetFilePointer
ReadFile
GetFileSizeEx
WideCharToMultiByte
MultiByteToWideChar
CopyFileW
FindResourceExW
FindResourceW
GetModuleHandleW
CloseHandle
SizeofResource
LoadResource
ReleaseSemaphore
GetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
LockResource
InterlockedDecrement
InterlockedIncrement
GetCommandLineW
CreateDirectoryW
FindFirstFileExW
GetTimeZoneInformation
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetExitCodeThread
GetCurrentThread
WaitForSingleObjectEx
DuplicateHandle
LoadLibraryExA
GetSystemInfo
LocalFree
IsDebuggerPresent
OutputDebugStringW
GetLocalTime
GlobalMemoryStatusEx
OpenProcess
WinExec
lstrcmpiA
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
GetTempPathW
GetTempFileNameA
SetFileAttributesW
DeleteFileA
DeleteFileW
GetStringTypeW
GetConsoleCP
ReadConsoleW
GetACP
SetFilePointerEx
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
ExitProcess
ExitThread
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
FreeLibraryAndExitThread
GetThreadTimes
EncodePointer
UnregisterWait
RegisterWaitForSingleObject
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
SetEvent
GetComputerNameW
GetSystemDirectoryW
DeviceIoControl
GetVolumeInformationW
SetThreadAffinityMask
PeekNamedPipe
GetFileType
WaitForMultipleObjects
SleepEx
VerifyVersionInfoA
VerSetConditionMask
AreFileApisANSI
InterlockedCompareExchange
GetDiskFreeSpaceW
LockFile
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetFullPathNameA
UnlockFileEx
SetLastError
MoveFileExA
MoveFileExW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GlobalAlloc
UnmapViewOfFile
HeapValidate
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
FlushViewOfFile
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetFileSize
GetCurrentProcessId
SystemTimeToFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
FlushFileBuffers
WriteConsoleA
SetConsoleTitleA
FreeConsole
AllocConsole
SetConsoleCtrlHandler
SetConsoleMode
GetConsoleMode
GlobalLock
GetStdHandle
GlobalUnlock
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryA
SetEndOfFile
CreateFileA
SetEnvironmentVariableA
CreateMutexW
WriteFile
ExpandEnvironmentStringsA
FormatMessageW
GetSysColor
GetMenuItemCount
SendMessageW
wsprintfW
wsprintfA
PostMessageW
DestroyWindow
ShowWindow
FlashWindow
MoveWindow
SetWindowPos
GetActiveWindow
GetKeyState
EnableWindow
IsWindowEnabled
GetSystemMetrics
SwitchToThisWindow
SetForegroundWindow
SetPropW
RemovePropW
SetWindowTextW
ClientToScreen
ScreenToClient
GetWindowLongW
SetWindowLongW
CopyRect
IsWindow
GetPropW
GetDesktopWindow
GetWindow
GetDlgItem
CheckRadioButton
IsDlgButtonChecked
GetParent
IntersectRect
OffsetRect
IsRectEmpty
PtInRect
PeekMessageW
SetCursor
GetCursorPos
LoadCursorW
UnregisterClassW
DestroyCursor
SetTimer
KillTimer
SetRect
InflateRect
UnionRect
EqualRect
SetFocus
GetFocus
DefWindowProcW
CallWindowProcW
RegisterClassExW
CreateWindowExW
TrackMouseEvent
PostQuitMessage
AnimateWindow
SetLayeredWindowAttributes
IsIconic
IsZoomed
GetCapture
SetCapture
ReleaseCapture
UpdateWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
GetClientRect
GetWindowRect
CreateCaret
GetCaretBlinkTime
HideCaret
SetCaretPos
MapWindowPoints
DrawIconEx
InvertRect
FillRect
GetWindowThreadProcessId
FindWindowW
EmptyClipboard
RegisterClipboardFormatW
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
GetClassNameA
GetShellWindow
WindowFromPoint
CharUpperA
GetClassNameW
DestroyIcon
MonitorFromWindow
GetMonitorInfoW
SetActiveWindow
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
MsgWaitForMultipleObjects
GetForegroundWindow
MessageBoxW
LoadIconW
LoadBitmapW
CreateIconFromResource
LoadImageW
CharNextW
GetIconInfo
EnableMenuItem
AppendMenuW
DrawTextW
SystemParametersInfoA
CharLowerBuffW
MapVirtualKeyA
UpdateLayeredWindow
CreatePopupMenu
GetMenuItemInfoW
TrackPopupMenu
DestroyMenu
DeleteDC
TextOutW
SetStretchBltMode
StretchDIBits
BitBlt
CreateRectRgn
PtInRegion
DeleteObject
Arc
Chord
CombineRgn
CreateEllipticRgnIndirect
CreatePen
CreatePatternBrush
CreateRectRgnIndirect
Ellipse
ExcludeClipRect
GetClipRgn
GetRgnBox
GetTextColor
GetTextExtentPoint32W
IntersectClipRect
OffsetRgn
RectInRegion
RestoreDC
GetDeviceCaps
SaveDC
ExtSelectClipRgn
SetRectRgn
SetTextColor
GetWorldTransform
SetWorldTransform
Polyline
GetCurrentObject
GetViewportOrgEx
EnumFontsW
CreateRoundRectRgn
CreateBitmap
CreateCompatibleDC
SelectObject
SetGraphicsMode
CreateFontIndirectW
CreateSolidBrush
GetClipBox
GetStockObject
Rectangle
SetBkMode
GetObjectW
StretchBlt
SetViewportOrgEx
SetMapMode
StartDocW
StartPage
EndDoc
RoundRect
EndPage
CreateDIBSection
CreateCompatibleBitmap
GetSaveFileNameW
GetOpenFileNameW
PrintDlgExW
ControlService
CreateServiceW
DeleteService
OpenProcessToken
AllocateAndInitializeSid
CheckTokenMembership
RegQueryInfoKeyW
GetUserNameW
StartServiceW
QueryServiceStatusEx
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
ChangeServiceConfigW
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptAcquireContextA
CryptGenRandom
CryptDestroyKey
CryptImportKey
CryptEncrypt
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
LookupAccountNameW
ConvertSidToStringSidA
EnumServicesStatusW
GetUserNameA
DuplicateTokenEx
FreeSid
CoUninitialize
StringFromCLSID
CoInitializeSecurity
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
OleLockRunning
CLSIDFromString
CLSIDFromProgID
CreateBindCtx
CoInitialize
CreateStreamOnHGlobal
CoInitializeEx
CoSetProxyBlanket
IIDFromString
CoCreateGuid
GetErrorInfo
SysAllocString
SysFreeString
VariantInit
VariantClear
PathAppendW
PathFileExistsW
PathFileExistsA
StrToIntExW
PathAddBackslashW
PathFindExtensionW
PathFindFileNameW
PathIsDirectoryW
PathRemoveFileSpecW
PathStripPathW
StrCpyW
PathCombineW
StrStrIA
PathStripPathA
StrToIntA
StrIsIntlEqualW
StrCmpIW
PathCanonicalizeW
_FPDFText_CountChars@4
_FPDF_PageToDevice@48
_FPDF_DeviceToPage@40
_FORM_OnBeforeClosePage@8
_FORM_OnAfterLoadPage@8
_FPDFBitmap_GetStride@4
_FPDFBitmap_GetHeight@4
_FPDFBitmap_GetWidth@4
_FPDFBitmap_GetBuffer@4
_FPDF_RenderPage@32
_FPDF_DestroyLibrary@0
_FPDFText_GetUnicode@8
_FPDFText_GetCharIndexAtPos@36
_FPDFText_GetText@16
_FPDFText_CountRects@12
_FPDFText_GetRect@24
_FPDF_InitLibraryWithConfig@4
_FPDFDOC_InitFormFillEnvironment@8
_FPDF_CloseDocument@4
_FPDFAction_GetType@4
_FPDF_GetPageCount@4
_FPDF_GetLastError@0
_FPDF_LoadCustomDocument@8
_FPDFDest_GetPageIndex@8
_FPDFAction_GetURIPath@16
_FPDFBookmark_GetAction@4
_FPDFBookmark_GetDest@8
_FPDFBookmark_GetTitle@12
_FPDFBookmark_GetNextSibling@8
_FPDFBookmark_GetFirstChild@8
_FPDFLink_CloseWebLinks@4
_FPDFLink_GetRect@28
_FPDFLink_CountRects@8
_FPDFLink_GetURL@16
_FPDFLink_CountWebLinks@4
_FPDFLink_LoadWebLinks@4
_FPDFText_ClosePage@4
_FPDFText_LoadPage@4
_FPDF_FFLDraw@36
_FPDFBitmap_FillRect@24
_FPDFBitmap_Create@12
_FPDF_ClosePage@4
_FPDF_RenderPageBitmap@32
_FPDF_LoadPage@8
_FPDFBitmap_Destroy@4
_FPDFAction_GetDest@8
_FPDFAction_GetFilePath@12
_FPDFLink_GetLinkAtPoint@20
_FPDFLink_GetDest@8
_FPDFLink_GetAction@4
_FPDFText_FindStart@16
_FPDFText_FindNext@4
_FPDFText_FindPrev@4
_FPDFText_GetSchResultIndex@4
_FPDFText_GetSchCount@4
_FPDFText_FindClose@4
_FPDF_GetPageSizeByIndex@16
CreatePropertySheetPageW
ImmReleaseContext
ImmGetContext
MakeSureDirectoryPathExists
GetAdaptersInfo
NetApiBufferFree
NetWkstaGetInfo
AlphaBlend
GradientFill
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipDrawImageRectI
GdipGraphicsClear
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipGetImageEncoders
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
recvfrom
sendto
accept
listen
ioctlsocket
WSAStartup
gethostname
htonl
ntohl
freeaddrinfo
getaddrinfo
WSAIoctl
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSACleanup
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
ord50
ord22
ord26
ord60
ord32
ord33
ord35
ord211
ord46
ord27
ord41
ord301
ord200
ord30
ord79
ord143
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ