Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
516fb2366ec666ec738113b44fb9045c850ec014422ddeed9036332ca921cceb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
516fb2366ec666ec738113b44fb9045c850ec014422ddeed9036332ca921cceb.dll
Resource
win10v2004-20220812-en
Target
516fb2366ec666ec738113b44fb9045c850ec014422ddeed9036332ca921cceb
Size
3.1MB
MD5
a91fd7252c4c3c963f176b0afedc8ae5
SHA1
82be111e1fa395661646662c36b75514b49bd22d
SHA256
516fb2366ec666ec738113b44fb9045c850ec014422ddeed9036332ca921cceb
SHA512
5b611e67e9ba7ea80db5f0b865a871bf8267e2278d3e0843fdaee70124487290ae768919c9869c2403cdedcb6b18e0f2672833c5c589c1fd576756a30a7799d7
SSDEEP
49152:o9zmvTCImpuRwhw5peFcuzFdYPpPUPbSeJa2Cu4G:MmvzwFcadYBMt
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetACP
GetModuleFileNameA
CreateDirectoryA
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
FindFirstFileA
LeaveCriticalSection
GetCurrentThreadId
Sleep
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetLocaleInfoA
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetVersionExA
GetProcessHeap
GetTimeZoneInformation
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
HeapReAlloc
CloseHandle
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
GetFullPathNameA
DeleteFileA
MoveFileA
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
FindNextFileA
GetProcAddress
GetModuleHandleA
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
SetHandleCount
GetStartupInfoA
FlushFileBuffers
FatalAppExitA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCurrentDirectoryA
SetCurrentDirectoryA
SetStdHandle
CreateFileA
CreateFileW
WriteConsoleA
GetConsoleOutputCP
HeapSize
SetConsoleCtrlHandler
LoadLibraryW
FreeLibrary
LoadLibraryA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEndOfFile
SetEnvironmentVariableA
??0BuildIndex@@QAE@ABV0@@Z
??0BuildIndex@@QAE@PBDW4CodeType@@@Z
??0CDllObject@@QAE@ABV0@@Z
??0CDllObject@@QAE@XZ
??0JudianService@@IAE@XZ
??0JudianService@@QAE@ABV0@@Z
??0QueryTerm@@QAE@ABV0@@Z
??0QueryTerm@@QAE@W4CodeType@@@Z
??0SearchIndex@@QAE@ABV0@@Z
??0SearchIndex@@QAE@PBDW4CodeType@@@Z
??0UpdateIndex@@QAE@ABV0@@Z
??0UpdateIndex@@QAE@PBD@Z
??1BuildIndex@@UAE@XZ
??1CDllObject@@UAE@XZ
??1JudianService@@MAE@XZ
??1QueryTerm@@UAE@XZ
??1SearchIndex@@UAE@XZ
??1UpdateIndex@@UAE@XZ
??2CDllObject@@SAPAXI@Z
??3CDllObject@@SAXPAX@Z
??4BuildIndex@@QAEAAV0@ABV0@@Z
??4CDllObject@@QAEAAV0@ABV0@@Z
??4JudianService@@QAEAAV0@ABV0@@Z
??4QueryTerm@@QAEAAV0@ABV0@@Z
??4SearchIndex@@QAEAAV0@ABV0@@Z
??4UpdateIndex@@QAEAAV0@ABV0@@Z
??_7BuildIndex@@6B@
??_7CDllObject@@6B@
??_7JudianService@@6B@
??_7QueryTerm@@6B@
??_7SearchIndex@@6B@
??_7UpdateIndex@@6B@
??_FQueryTerm@@QAEXXZ
?AddDocument@BuildIndex@@IAEXXZ
?AddQuery@QueryTerm@@QAE_NAAUtagQueryTerm@1@@Z
?AddQuery@QueryTerm@@QAE_NPBD0W4QueryType@@W4QueryCond@@@Z
?AddQuery@QueryTerm@@QAE_NPB_W0W4QueryType@@W4QueryCond@@@Z
?AddSegmentResult@SearchIndex@@QAE_NPA_W@Z
?AddValueToField@BuildIndex@@IAEXAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?Build@BuildIndex@@QAEHPBD00W4CodeType@@@Z
?Build@BuildIndex@@QAEHPB_W00W4CodeType@@@Z
?BuildLine@BuildIndex@@QAEHPBDPAPBD@Z
?BuildLine@BuildIndex@@QAEHPB_WPAPB_W@Z
?CheckFields@BuildIndex@@IAE_NPB_W@Z
?CheckFromAndTo@SearchIndex@@IAE_NII@Z
?CheckSelectField@SearchIndex@@IAE_NPB_W@Z
?CloseIndex@BuildIndex@@QAE_NXZ
?CloseIndex@UpdateIndex@@QAE_NXZ
?CountResult@SearchIndex@@IAEHXZ
?DeletePPArray@SearchIndex@@IAEXPAPAD@Z
?DeletePPArray@SearchIndex@@IAEXPAPA_W@Z
?FetchNext@SearchIndex@@QAEPAPADXZ
?GenerateQuery@SearchIndex@@IAE_NPBVQueryTerm@@@Z
?GetBuildTime@BuildIndex@@QAE_KXZ
?GetCodeType@BuildIndex@@QAE?AW4CodeType@@XZ
?GetCodeType@SearchIndex@@QAE?AW4CodeType@@XZ
?GetSearchTime@SearchIndex@@QAE_KXZ
?GetSegmentResult@SearchIndex@@QAEPAPADXZ
?GetTotalCount@SearchIndex@@QAEHXZ
?InitSegment@JudianService@@IAE_NXZ
?InitServer@JudianService@@QAE_NPBD@Z
?Instance@JudianService@@SAPAV1@XZ
?IsInited@JudianService@@QAE_NXZ
?OpenIndex@BuildIndex@@QAE_N_N@Z
?OpenIndex@UpdateIndex@@QAE_NXZ
?PauseServer@JudianService@@QAE_NXZ
?PretreatQueryValue@SearchIndex@@IAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?PrintResult@SearchIndex@@QAEXXZ
?Release@JudianService@@QAEXXZ
?ReleaseSegment@JudianService@@IAEXXZ
?Search@SearchIndex@@QAEHPBDPBVQueryTerm@@II@Z
?Search@SearchIndex@@QAEHPB_WPBVQueryTerm@@II@Z
?SetCodeType@BuildIndex@@QAE_NW4CodeType@@@Z
?SetCodeType@SearchIndex@@QAE_NW4CodeType@@@Z
?StopServer@JudianService@@QAE_NXZ
?WordSegment@JudianService@@QAE_NPBDAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?_Build@BuildIndex@@IAEHPB_WPBD0W4CodeType@@@Z
?_BuildLine@BuildIndex@@IAEHPB_WPAPB_W@Z
?_Search@SearchIndex@@IAEHPB_WPBVQueryTerm@@II_N@Z
?m_pInstance@JudianService@@1PAV1@A
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ