Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
12e21464360ea044fcedbaaeccb63abfa6aa4ea6414d873578a01f83e5de076a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12e21464360ea044fcedbaaeccb63abfa6aa4ea6414d873578a01f83e5de076a.exe
Resource
win10v2004-20220812-en
Target
12e21464360ea044fcedbaaeccb63abfa6aa4ea6414d873578a01f83e5de076a
Size
243KB
MD5
c863185ffe0edcb38710ebf2e8d1c6b1
SHA1
cbd519fa686d7d66eaec2e87c0f5c83dc9e2fdfd
SHA256
12e21464360ea044fcedbaaeccb63abfa6aa4ea6414d873578a01f83e5de076a
SHA512
d5d31b08225f9850042b9257344930f6dad5167d148e2d18d688a8238f9586306c7b7f7591268d76ef7a7b43b4d2671b841e6cb426fea3cf52b41530ad7d841c
SSDEEP
6144:1fl+DM1JpV+mISWl01IcbDdlwutfdrxqR:1tRvptIUPdlhtfeR
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetEvent
GetCommandLineW
SetEndOfFile
CreateFileW
CreateFileA
GetCurrentThreadId
CreateEventW
CreateThread
Sleep
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetModuleHandleW
LoadLibraryExW
SetStdHandle
FindResourceW
GetConsoleOutputCP
WriteConsoleA
ReadFile
GetLocaleInfoW
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetOEMCP
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
FindFirstFileA
FindClose
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GetLastError
DeleteCriticalSection
lstrlenW
InitializeCriticalSection
RaiseException
WriteConsoleW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
LocalFree
GetFileAttributesA
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapReAlloc
GetProcessHeap
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
GetProcAddress
GetModuleHandleA
ExitProcess
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
DispatchMessageW
UnregisterClassA
CharNextW
TranslateMessage
GetMessageW
CharUpperW
PostThreadMessageW
wsprintfW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
CoCreateInstance
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
SysStringByteLen
SysAllocStringByteLen
SafeArrayLock
SafeArrayUnlock
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocString
VariantClear
SafeArrayCopy
SysFreeString
SafeArrayGetVartype
?Instance@JudianService@@SAPAV1@XZ
?InitServer@JudianService@@QAE_NPBD@Z
??1SearchIndex@@UAE@XZ
??1QueryTerm@@UAE@XZ
??2CDllObject@@SAPAXI@Z
??1JudianService@@MAE@XZ
??3CDllObject@@SAXPAX@Z
??1CDllObject@@UAE@XZ
?GetTotalCount@SearchIndex@@QAEHXZ
??0SearchIndex@@QAE@PBDW4CodeType@@@Z
?StopServer@JudianService@@QAE_NXZ
?Release@JudianService@@QAEXXZ
?AddQuery@QueryTerm@@QAE_NPB_W0W4QueryType@@W4QueryCond@@@Z
?Search@SearchIndex@@QAEHPB_WPBVQueryTerm@@II@Z
?GetSegmentResult@SearchIndex@@QAEPAPADXZ
??0QueryTerm@@QAE@W4CodeType@@@Z
?FetchNext@SearchIndex@@QAEPAPADXZ
??0CDllObject@@QAE@ABV0@@Z
??0JudianService@@QAE@ABV0@@Z
??0QueryTerm@@QAE@ABV0@@Z
??0SearchIndex@@QAE@ABV0@@Z
??4CDllObject@@QAEAAV0@ABV0@@Z
??4JudianService@@QAEAAV0@ABV0@@Z
??4QueryTerm@@QAEAAV0@ABV0@@Z
??4SearchIndex@@QAEAAV0@ABV0@@Z
??_7CDllObject@@6B@
??_7JudianService@@6B@
??_7QueryTerm@@6B@
??_7SearchIndex@@6B@
??_FQueryTerm@@QAEXXZ
?GetCodeType@SearchIndex@@QAE?AW4CodeType@@XZ
?GetSearchTime@SearchIndex@@QAE_KXZ
?IsInited@JudianService@@QAE_NXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ