Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
c6486dba9d0da93420d1562eaaa2f7d5d1328402e5cfd11a288c70f2fdc36b2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6486dba9d0da93420d1562eaaa2f7d5d1328402e5cfd11a288c70f2fdc36b2a.exe
Resource
win10v2004-20220901-en
Target
c6486dba9d0da93420d1562eaaa2f7d5d1328402e5cfd11a288c70f2fdc36b2a
Size
1.0MB
MD5
502f429a6c16c5399ba57d748bd9bc72
SHA1
372fd15dbdef59d6e4cfb1b202e8efd5c4d67b25
SHA256
c6486dba9d0da93420d1562eaaa2f7d5d1328402e5cfd11a288c70f2fdc36b2a
SHA512
8533b258c5a2274fbe11676d569803642136039b3eaf944eba6645db2300c6a5eb67016d3245b13d9e81483de2860bcf126303294383714e84048d2f9335bc97
SSDEEP
24576:aajTetP4xNH82y4vez1dkVHFdttDWooehTFI1Efk4j2VTMlPpD:a7Ii1dkVll6ooehTFI2j2VTMlPpD
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ImmDisableIME
GetCurrentProcessId
QueryDosDeviceW
GetEnvironmentVariableW
GetLogicalDriveStringsW
VirtualQuery
GetPrivateProfileStringW
DeleteFileW
GetTickCount
MoveFileW
GetUserDefaultLangID
HeapFree
GetProcessHeap
InterlockedDecrement
GetProcAddress
GetModuleHandleW
InterlockedIncrement
CreateDirectoryW
GetWindowsDirectoryW
GetTempFileNameW
CopyFileW
GetLocalTime
GetModuleFileNameW
WriteFile
MoveFileExW
Sleep
SetErrorMode
CloseHandle
GetLastError
CreateMutexW
GetCurrentThreadId
GetCurrentDirectoryW
SetFileAttributesW
GetTempPathW
RemoveDirectoryW
GetLongPathNameW
FindFirstFileW
ExpandEnvironmentStringsW
GetCurrentProcess
OpenProcess
SetFilePointer
GetFileSizeEx
WaitForMultipleObjects
WaitForSingleObject
InterlockedExchangeAdd
LocalFree
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GlobalMemoryStatusEx
CreateProcessW
FormatMessageW
SetLastError
ResumeThread
DeviceIoControl
GetACP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
RtlCaptureContext
ReleaseSemaphore
MultiByteToWideChar
WideCharToMultiByte
GetProcessId
TerminateThread
CreateThread
CreateSemaphoreW
VirtualQueryEx
SetNamedPipeHandleState
TransactNamedPipe
GetFileAttributesW
WaitNamedPipeW
LoadLibraryW
FreeLibrary
GetVersionExW
OutputDebugStringW
LockResource
GetSystemInfo
LoadResource
FindResourceW
lstrcmpiW
ReleaseMutex
CreateFileW
FileTimeToSystemTime
EnterCriticalSection
GetFileAttributesExW
GetFullPathNameW
FindClose
FindNextFileW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
LoadLibraryExW
lstrlenW
ResetEvent
SetEvent
CreateEventW
HeapAlloc
GetComputerNameExW
GetFileTime
GetFileSize
SetEndOfFile
LeaveCriticalSection
SetFileTime
ReadFile
InitializeCriticalSection
DeleteCriticalSection
wsprintfW
CreateServiceW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
ChangeServiceConfig2W
DeleteService
StartServiceW
OpenServiceW
SHGetFolderPathW
SHGetSpecialFolderPathW
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
PathFileExistsW
_except_handler4_common
__CxxFrameHandler3
_purecall
memcpy
wcsrchr
__std_type_info_name
memchr
wcschr
wcsstr
strstr
strchr
__std_exception_destroy
_CxxThrowException
memmove
memset
_set_purecall_handler
__std_exception_copy
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
_set_app_type
_invalid_parameter_noinfo
_configure_wide_argv
_initialize_wide_environment
_set_invalid_parameter_handler
_get_wide_winmain_command_line
_errno
_initterm
_initterm_e
exit
_controlfp_s
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_exit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_beginthreadex
wcstoul
_wtoi
_itow_s
atoi
malloc
_callnewh
free
calloc
_set_new_mode
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s
__acrt_iob_func
__p__commode
__stdio_common_vswprintf
_set_fmode
__stdio_common_vswscanf
__stdio_common_vsprintf
ftell
_wfopen_s
fclose
fseek
rewind
fwrite
fread
_stricmp
wcsncpy
towupper
towlower
wcscpy_s
_wcsicmp
_wcsnicmp
toupper
tolower
isalnum
_time64
_localtime64
_mktime64
rand
srand
_splitpath_s
__setusermatherr
_except1
modf
_dtest
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ