Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
c4243ed79ac7268b7936bb6a4633d419420fd100b5d68f9dd01316e8e48144ba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c4243ed79ac7268b7936bb6a4633d419420fd100b5d68f9dd01316e8e48144ba.exe
Resource
win10v2004-20221111-en
Target
c4243ed79ac7268b7936bb6a4633d419420fd100b5d68f9dd01316e8e48144ba
Size
137KB
MD5
25a028da6ae084a871517afb2026edd0
SHA1
fea93e2b574198aee892802f8f99587d645d0ff8
SHA256
c4243ed79ac7268b7936bb6a4633d419420fd100b5d68f9dd01316e8e48144ba
SHA512
1babd91ec178d4f21d009073934efa2a4e6fda9a81d5335d9329a8343124cecb178acdd56316ece74939209ed0d5a154991a3638be425a67ad3b448e4226e2b3
SSDEEP
1536:HVG8SNt1l8DjQPZv/7+qO3Zjm3zbptwzAOI5JQzsqQ1DBAy3tdSFBYa7CU8i2:Hq1l6jQxvzBO3Zj8BPOI5s8Dx3WFDj
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitCommonControlsEx
??0CTXBSTR@@QAE@XZ
?ReverseFind@CTXStringW@@QBEH_W@Z
??0CTXStringW@@QAE@PB_W@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
??1CTXBSTR@@QAE@XZ
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?OnExitWinMain@Misc@Util@@YAXXZ
?NotifyIdle@TXTimer@@YAXXZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?GetLength@CTXStringW@@QBEHXZ
??BCTXStringW@@QBEPB_WXZ
??YCTXStringW@@QAEAAV0@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?CheckVistaAndStartSelfMediumLevel@Sys@Util@@YAHXZ
?OnUninitCom@Misc@Util@@YAXXZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?Find@CTXStringW@@QBEHPB_WH@Z
?Find@CTXStringW@@QBEH_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??0CFmtString@@QAE@XZ
??1CFmtString@@QAE@XZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?NotifyIdle@Window@Util@@YAJXZ
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?MinimzeMemory@Sys@Util@@YAXXZ
??8@YA_NABVCTXStringW@@PB_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Resolve@HostResolve@Util@@YAJPA_WPAUITXHostResolverSink@@PAK@Z
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?AddFmtString@TXStringBundle@@YAXABVCFmtString@@@Z
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?GetSession@TXLog@@YAKXZ
?GetLCID@NLS@@YAKXZ
?ValidateBugReport@TXBugReport@@YAXXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?Stop@TXBugMonitor@@YAHXZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?DelIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??1CTXStringW@@QAE@XZ
?InitNetwork@Network@Util@@YAHXZ
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@ABV0@@Z
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Left@CTXStringW@@QBE?AV1@H@Z
ord25
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?Format@CTXStringW@@QAAXPB_WZZ
?GetGlobalSysDir@Sys@Util@@YA?AVCTXStringW@@XZ
?Init@Version@@YAHXZ
?GetProgramRootDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z
?GetMajorVer@Version@@YAEXZ
?GetMinorVer@Version@@YAEXZ
?GetUserDataSaveSetting@Sys@Util@@YA?AVCTXStringW@@AAKAAV3@@Z
?GetBuildVer@Version@@YAKXZ
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?SetEnablePreload@Misc@Util@@YAXH@Z
?GetMultiLoginInfo@MultiLogin@Util@@YAHPAVCTXStringW@@PAK1@Z
?MarkFinishedLogin@MultiLogin@Util@@YAXH@Z
?SetFirstStartQQ@Misc@Util@@YAXH@Z
?SetPerfReportDataForBool@PerfDataReportUtil@@YAXPA_WH@Z
?GetEnablePreload@Misc@Util@@YAHXZ
?SetPerfReportDataForWord@PerfDataReportUtil@@YAXPA_WKH@Z
InterlockedExchange
GetStartupInfoW
OpenEventW
GetModuleFileNameW
WaitForSingleObject
SetEvent
GetProcAddress
CreateThread
FreeLibrary
CreateProcessW
GetSystemInfo
QueryPerformanceFrequency
GetModuleHandleW
CloseHandle
GlobalMemoryStatus
GetEnvironmentVariableW
InterlockedIncrement
SetEnvironmentVariableW
GetCurrentThreadId
GetCurrentProcess
WriteProcessMemory
InterlockedDecrement
GetDriveTypeW
OpenMutexW
QueryPerformanceCounter
CreateMutexW
GetCurrentProcessId
InitializeCriticalSection
CreateEventW
DeleteCriticalSection
SetThreadPriority
GetCurrentThread
GetVersionExW
Sleep
GetTickCount
GetProcessTimes
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedCompareExchange
WaitMessage
PeekMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
PostThreadMessageW
RegQueryValueExW
RegOpenKeyExW
OleInitialize
OleUninitialize
CoCreateInstance
CoUninitialize
ord30
ord64
ord32
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
__CxxFrameHandler3
_except_handler4_common
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??2@YAPAXI@Z
??_V@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
_time64
__argc
__wargv
_CxxThrowException
wcsncmp
_wtoi
memset
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE