Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
839d0e7eaf38757b61d06f6d296399b33168d824de6290adc46d510d5bbcbcc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
839d0e7eaf38757b61d06f6d296399b33168d824de6290adc46d510d5bbcbcc3.exe
Resource
win10v2004-20220812-en
Target
839d0e7eaf38757b61d06f6d296399b33168d824de6290adc46d510d5bbcbcc3
Size
557KB
MD5
00a98447a88902e5bc9d97b1d2b456c0
SHA1
4d54cc10727d3974b43cf80dfdb2693b68d18d74
SHA256
839d0e7eaf38757b61d06f6d296399b33168d824de6290adc46d510d5bbcbcc3
SHA512
b64b086d400ebd1214e10543693bcb56da5cb3226efe585c5d2e102c236195f64062d3ce36b6640a925d5a7613532c421686748211b08ce598cdfa9798b8c9b0
SSDEEP
6144:+OV4Pb1pxqFVJTlyzOlod333333Y333333u6KOryP2Lb+g9JMqy5v08Xla39UAZi:qxqHBy8KOe
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreatePipe
ReadFile
GetStdHandle
FreeLibrary
GetProcAddress
FlushInstructionCache
GetLastError
RaiseException
DeleteCriticalSection
CreateMutexW
InterlockedDecrement
lstrcmpiW
LoadLibraryExW
CreateToolhelp32Snapshot
GetModuleHandleW
SetLastError
InitializeCriticalSection
InterlockedIncrement
OpenProcess
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
Process32NextW
Process32FirstW
GetCurrentThreadId
TerminateProcess
LocalFree
GetCommandLineW
GetVersionExW
FindFirstFileW
FindClose
FindNextFileW
Sleep
GetFileAttributesExW
DeleteFileW
lstrcmpW
CreateDirectoryW
RemoveDirectoryW
lstrcpynW
CreateFileW
GetFileSize
TerminateThread
LoadLibraryW
CreateEventW
ResetEvent
WaitForSingleObject
WriteFile
SetFilePointer
SetEvent
GetTickCount
HeapSize
GetProcessHeap
GetVersionExA
HeapAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
OutputDebugStringW
IsBadReadPtr
GetLocalTime
GetFileAttributesW
GetCurrentProcess
DuplicateHandle
CreateProcessW
CloseHandle
GetDriveTypeW
GetVolumeInformationW
GetLogicalDrives
WideCharToMultiByte
lstrlenW
FindResourceW
LockResource
FindResourceExW
GetModuleFileNameW
LoadResource
SizeofResource
GetComputerNameW
MultiByteToWideChar
HeapReAlloc
HeapFree
WaitForMultipleObjects
HeapDestroy
LoadCursorW
LoadIconW
MapWindowPoints
GetClientRect
EnableWindow
GetWindowRect
GetWindow
GetWindowTextW
GetActiveWindow
SendMessageW
GetDlgItem
SetWindowPos
EndDialog
InvalidateRect
CallWindowProcW
GetWindowLongW
LoadStringW
KillTimer
ShowWindow
DialogBoxParamW
CharNextW
SetWindowLongW
UnregisterClassA
FindWindowA
SendMessageTimeoutW
IsIconic
MessageBoxW
GetWindowTextLengthW
SystemParametersInfoW
GetDlgCtrlID
SetTimer
GetParent
SetWindowTextW
DefWindowProcW
GetClassInfoExW
SetRect
DestroyWindow
RegisterClassExW
CreateWindowExW
IsWindow
SetCursor
PostMessageW
SetTextColor
SetBkColor
GetObjectW
CreateFontIndirectW
SetBkMode
GetStockObject
CreateSolidBrush
SelectObject
RegQueryInfoKeyW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegDeleteKeyW
GetUserNameW
RegCloseKey
RegOpenKeyW
RegCreateKeyExW
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
CommandLineToArgvW
CoLoadLibrary
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoTaskMemRealloc
CoCreateInstance
CoInitializeEx
CLSIDFromProgID
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoFreeLibrary
SysFreeString
SysAllocStringByteLen
VarUI4FromStr
SysAllocString
?SetDoc@CMarkup@@QAE_NABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetAttrib@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@UMCD_CSTR@@@Z
?FindElem@CMarkup@@QAE_NUMCD_CSTR@@@Z
?GetData@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
??1CMarkup@@QAE@XZ
?UTF8To16@CMarkup@@SAHPAGPBDH@Z
?OutOfElem@CMarkup@@QAE_NXZ
?IntoElem@CMarkup@@QAE_NXZ
??0CMarkup@@QAE@XZ
?InitVersionInfo@qqmusic@@YAHPAUHINSTANCE__@@@Z
?WriteLog@qqmusic@@YAXKPB_WZZ
?GetAppDataFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetOsVersion@qqmusic@@YAXAAK0@Z
wnsprintfW
StrCmpW
PathFileExistsW
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_snprintf_s
_vsnwprintf_s
strncpy_s
_getpid
towlower
srand
wcsncat_s
__setusermatherr
??3@YAXPAX@Z
memmove_s
iswspace
free
??_V@YAXPAX@Z
malloc
memcpy_s
_vscwprintf
vswprintf_s
wcschr
wcsstr
wcstoul
wcsncpy_s
??2@YAPAXI@Z
_recalloc
_wtoi
_purecall
_time64
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
wcsrchr
calloc
_beginthreadex
swprintf_s
_CxxThrowException
memcpy
memset
__CxxFrameHandler3
fputc
__iob_func
exit
rand
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
Netbios
HttpOpenRequestW
HttpSendRequestW
InternetQueryOptionW
InternetCloseHandle
InternetSetOptionW
InternetOpenW
InternetCanonicalizeUrlW
InternetReadFileExA
InternetSetStatusCallbackW
InternetConnectW
InternetCrackUrlW
HttpQueryInfoW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE