Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
46b1c551177fed24492362cac00f1ca0eeda2e73d136880b5cade03db729bf15.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
46b1c551177fed24492362cac00f1ca0eeda2e73d136880b5cade03db729bf15.exe
Resource
win10v2004-20220812-en
Target
46b1c551177fed24492362cac00f1ca0eeda2e73d136880b5cade03db729bf15
Size
100KB
MD5
802dd4da68cbfb99c5501c29e8dffef0
SHA1
ca5c963f8811f637066d0e6d5217c768bfa99f58
SHA256
46b1c551177fed24492362cac00f1ca0eeda2e73d136880b5cade03db729bf15
SHA512
b05b4765fb016851d905fe514e7c1ab7cdd7491e1a1bde2b87aac2bc4f25355ba6f9da360c72cbdaf58a7c67e63cada0871c6e4dd06fcfe07f162a9a90ac9b06
SSDEEP
1536:Jz1uOn5xLPQH6tY+3qCumOctUpvuw+xisKldZ:d1L59PQatD3qCumOcGEw+WF
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitCommonControlsEx
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??1CTXBSTR@@QAE@XZ
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
?GetMemoryUsage@Sys@Util@@YAXAAK0@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
ord25
??4CTXStringW@@QAEAAV0@ABV0@@Z
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?MinimzeMemory@Sys@Util@@YAXXZ
??BCTXStringW@@QBEPB_WXZ
?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z
??0CTXStringW@@QAE@PB_W@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?NotifyIdle@Window@Util@@YAJXZ
?EraseIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z
?DelIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?GetLength@CTXStringW@@QBEHXZ
??0CTXStringW@@QAE@PA_W@Z
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?OnUninitCom@Misc@Util@@YAXXZ
?SetTencentProductName@ProductConfig@Util@@YAHABVCTXStringW@@@Z
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
??0CFmtString@@QAE@XZ
??1CFmtString@@QAE@XZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?AddFmtString@TXStringBundle@@YAXABVCFmtString@@@Z
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?GetSession@TXLog@@YAKXZ
?GetLCID@NLS@@YAKXZ
?ValidateBugReport@TXBugReport@@YAXXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitNetwork@Network@Util@@YAHXZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?GetString@CTXStringW@@QBEPB_WXZ
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??ACTXStringW@@QBE_WH@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??8@YA_NPB_WABVCTXStringW@@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?GetAt@CTXStringW@@QBE_WH@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?NotifyIdle@TXTimer@@YAXXZ
ord34
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?Stop@TXBugMonitor@@YAHXZ
??0CTXStringW@@QAE@ABV0@@Z
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z
?VersionUpdate@QQUPDATECENTER@@YAJPB_W00000@Z
?GetStartupAccount@CommandLine@Util@@YA?AVCTXStringW@@XZ
?GetStartupType@CommandLine@Util@@YAHXZ
?GetStartupUI@CommandLine@Util@@YAHXZ
?IsAccountLogined@Account@Util@@YAHK@Z
?GetProgramRootDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetMajorVer@Version@@YAEXZ
?GetMinorVer@Version@@YAEXZ
?GetBuildVer@Version@@YAKXZ
?Init@Version@@YAHXZ
?IsQuickLogin@CommandLine@Util@@YAHXZ
?GetStartupMiniQTInfo@CommandLine@Util@@YA?AVCTXStringW@@XZ
?GetStartupGameID@CommandLine@Util@@YA_JXZ
GetTickCount
GetSystemDirectoryW
GetLastError
ReleaseMutex
GetCurrentThreadId
FindFirstFileW
GetSystemInfo
QueryPerformanceFrequency
WriteProcessMemory
GlobalMemoryStatus
InterlockedDecrement
GetProcAddress
FreeLibrary
GetModuleHandleW
GetCurrentProcessId
InitializeCriticalSection
GetCurrentProcess
CreateEventW
SetThreadPriority
DeleteCriticalSection
WaitForSingleObject
CloseHandle
InterlockedIncrement
Sleep
CreateThread
CreateProcessW
RaiseException
GetVersionExW
GetPrivateProfileStringW
LocalAlloc
InterlockedExchange
LoadLibraryA
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
CreateMutexW
SetEnvironmentVariableW
QueryPerformanceCounter
SetEvent
GetEnvironmentVariableW
OpenEventW
GetModuleFileNameW
LoadLibraryW
GetCurrentThread
wsprintfW
DispatchMessageW
WaitMessage
TranslateMessage
PeekMessageW
PostThreadMessageW
MessageBoxW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
OleUninitialize
CoCreateInstance
CoUninitialize
OleInitialize
ord32
ord30
ord64
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
_encode_pointer
_unlock
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
__CxxFrameHandler3
__dllonexit
wcsncpy
??3@YAXPAX@Z
mbstowcs_s
_invalid_parameter_noinfo
??2@YAPAXI@Z
_CxxThrowException
_wcslwr_s
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_time64
wcsncat_s
printf
__argc
__wargv
wcsncmp
_wtoi
wcscpy_s
wcsrchr
memset
?terminate@@YAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE