Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b6337083b12fc4a5421da2f95e18aaa7ad56a35a95bdb4f8867ec763af172134.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b6337083b12fc4a5421da2f95e18aaa7ad56a35a95bdb4f8867ec763af172134.exe
Resource
win10v2004-20220812-en
Target
b6337083b12fc4a5421da2f95e18aaa7ad56a35a95bdb4f8867ec763af172134
Size
66KB
MD5
8018b867e65384cdfdc2f51e1f8b04b6
SHA1
5d198cefa2b91fecb7638f549e91e8dbfb51c99f
SHA256
b6337083b12fc4a5421da2f95e18aaa7ad56a35a95bdb4f8867ec763af172134
SHA512
6ff820ce3a021a9805e923df32e09f042cf3b9151021a57f7f5eaf8054f856c1439a894bdb99f2babea37a12d7dcd732ecc8df22fa54f3769537da85eb141851
SSDEEP
768:v27PJkJFkqi6IbjIlZYm0TXVZtAUfDWVUEbR1BXB0IKGEEBugZEKjkEOHHxBSisa:v2K6ClZ30zPpDWpERu6KTOHH+isKldn
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitCommonControlsEx
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@_WABV0@@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
??1CTXStringA@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXStringW@@QAE@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXBSTR@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??1CTXStringW@@QAE@XZ
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
GetEnvironmentVariableW
GetCommandLineW
InitializeCriticalSection
GetCurrentThreadId
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
SetEvent
WaitForSingleObject
OpenProcess
CreateThread
lstrlenW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
SetEnvironmentVariableW
GetModuleFileNameW
DeleteCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
FindWindowW
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
SetForegroundWindow
GetDesktopWindow
UnregisterClassA
SendMessageW
PostThreadMessageW
RegisterClassExW
ShellExecuteW
CoUninitialize
CoCreateInstance
CoInitialize
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysFreeString
ord64
ord58
ord31
ord32
ord30
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_controlfp_s
__setusermatherr
_configthreadlocale
__p__commode
__p__fmode
__set_app_type
_invoke_watson
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
_CxxThrowException
free
??_V@YAXPAX@Z
__CxxFrameHandler3
memset
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_purecall
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
memcmp
?terminate@@YAXXZ
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE