Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ad9e1509e5ef60bf1b39398718f0f4f732388582fbbd2a7c7bdebc205a05ec27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad9e1509e5ef60bf1b39398718f0f4f732388582fbbd2a7c7bdebc205a05ec27.exe
Resource
win10v2004-20220812-en
Target
ad9e1509e5ef60bf1b39398718f0f4f732388582fbbd2a7c7bdebc205a05ec27
Size
332KB
MD5
902d33f61eaf148268a36115e7093df0
SHA1
91849d547e669f0310d68b2d93d4b0a309458056
SHA256
ad9e1509e5ef60bf1b39398718f0f4f732388582fbbd2a7c7bdebc205a05ec27
SHA512
49f7a127cdd3fe3490ab2b246126b360a0691e40957901794bbfe2d019159a4e195d2052a8cfd5de5308fc909c79217baa6d429bcdc712f3eb3e9bc76f4db6d8
SSDEEP
6144:A0JttyD23OcqIx6F4YeF3Gp0NbdjMSkwb2if1L5kz91xSxCFYdK:AIi2aIxNF3qWbdjMNwbn9y6sY
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?DeleteDirectory@FS@@YAHPB_W@Z
?CopyDirectory@FS@@YAHPB_W0PAUITXCopyDirProgress@@@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_WH@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@PB_W@Z
?Trim@CTXStringW@@QAEAAV1@XZ
?StartThread@CTXThreadModel@@QAEHXZ
?IsThreadRunning@CTXThreadModel@@IAEHXZ
??H@YA?AVCTXStringW@@ABV0@0@Z
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?ExtractCabEx@Zip@Util@@YAHPB_W0@Z
?Right@CTXStringW@@QBE?AV1@H@Z
??0CTXThreadModel@@IAE@XZ
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??1CTXThreadModel@@MAE@XZ
?ReverseFind@CTXStringW@@QBEH_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?RemoveFileSystem@FS@@YAHPB_W@Z
?StopThread@CTXThreadModel@@QAEXK@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
??1CTXBSTR@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?IsDirectoryExist@FS@@YAHPB_W@Z
??BCTXStringW@@QBEPB_WXZ
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@XZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Format@CTXStringW@@QAAXPB_WZZ
??ICTXBSTR@@QAEPAPA_WXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
ord34
?GetAt@CTXStringW@@QBE_WH@Z
??8CTXBSTR@@QBE_NPB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?IsFileExist@FS@@YAHPB_W@Z
?Find@CTXStringW@@QBEH_WH@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?DeleteFileW@FS@@YAHPB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
ord5562
ord3824
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3327
ord5378
ord1079
ord1198
ord757
ord566
ord3677
ord4535
ord4032
ord4008
ord6272
ord3795
ord6274
ord4320
ord2054
ord2009
ord5579
ord3800
ord1007
ord5096
ord6215
ord762
ord2531
ord2725
ord2829
ord4301
ord2708
ord2832
ord2534
ord2640
ord2527
ord2936
ord3712
ord3713
ord3703
ord2638
ord3943
ord4475
ord807
ord4255
ord590
ord331
ord1194
ord3163
ord1178
ord266
ord265
ord764
ord3826
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_except_handler4_common
_exit
_cexit
__wgetmainargs
_amsg_exit
_byteswap_ulong
_wtoi
free
malloc
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
memset
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
__argc
_invoke_watson
_controlfp_s
_crt_debugger_hook
_XcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_wcsicmp
__wargv
_CxxThrowException
_wtol
??0exception@std@@QAE@XZ
_purecall
_time64
_invalid_parameter_noinfo
GetTickCount
GetCurrentThreadId
InterlockedDecrement
CreateDirectoryW
WriteFile
GetFileSize
ReadFile
FindFirstFileW
FindNextFileW
FindClose
FreeLibrary
GetCurrentProcessId
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetDiskFreeSpaceExW
QueryPerformanceCounter
GetModuleHandleW
InterlockedIncrement
CloseHandle
CreateFileW
LoadLibraryW
RegisterClassExW
IsWindow
SendMessageTimeoutW
DispatchMessageW
TranslateMessage
WaitMessage
PeekMessageW
DefWindowProcW
ShowWindow
CreateWindowExW
GetStockObject
InitCommonControlsEx
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
VariantClear
SysAllocString
ord32
ord30
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
WTHelperGetProvCertFromChain
CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATCatalogInfoFromContext
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
CryptCATAdminReleaseCatalogContext
CertGetNameStringW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE