Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
acf0dbf03e2889623dd93623a0b630f33c87ae3a639be904da90da8816484f9b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
acf0dbf03e2889623dd93623a0b630f33c87ae3a639be904da90da8816484f9b.exe
Resource
win10v2004-20221111-en
Target
acf0dbf03e2889623dd93623a0b630f33c87ae3a639be904da90da8816484f9b
Size
2.2MB
MD5
5208b6a7749c60a42df256f43b8510ba
SHA1
18b1d0a2698ef77050617f7c57ddcac210a946fe
SHA256
acf0dbf03e2889623dd93623a0b630f33c87ae3a639be904da90da8816484f9b
SHA512
54878fbf4c566f0e210a46d0dc0f426a228c9989159c013a93c4d7564c5428cbb7738d2b52ef6e2ab3d8531aaa66b7d7bcdbce5d71f7327395b46c92e77b9302
SSDEEP
49152:4y6ekbAo4tuydqtmP6brEdIBKaP9EdGiuj:d6nEPW0CiGvj
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
CN=Wargaming.net Limited,O=Wargaming.net Limited,L=Nicosia,C=CY,1.2.840.113549.1.9.1=#0c14646f6d61696e4077617267616d696e672e6e6574
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
FindWindowW
SetWindowPos
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
SwitchToThisWindow
MessageBoxA
recvfrom
sendto
getsockname
getsockopt
htons
ntohs
setsockopt
socket
WSASetLastError
ioctlsocket
__WSAFDIsSet
select
getaddrinfo
freeaddrinfo
accept
connect
closesocket
bind
send
recv
WSAGetLastError
WSACleanup
getpeername
WSAStartup
gethostname
shutdown
listen
DeregisterEventSource
RegisterEventSourceW
ReportEventW
ord22
ord200
ord30
ord143
ord46
ord211
ord60
ord50
ord41
ord301
ord26
ord27
ord32
ord33
ord35
ord79
getCurrentPlatform
getWineVersion
isWow64
CertOpenSystemStoreW
CertEnumCertificatesInStore
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
AreFileApisANSI
GetFullPathNameW
GetFileInformationByHandle
FindFirstFileExW
IsDebuggerPresent
GetFileAttributesExW
CreateFileW
CreateDirectoryW
CreateSemaphoreW
OpenSemaphoreW
ReleaseSemaphore
FlushConsoleInputBuffer
GlobalMemoryStatus
GetCurrentProcessId
GetStartupInfoW
QueryPerformanceCounter
SystemTimeToFileTime
GetSystemTime
GetSystemTimeAsFileTime
LoadLibraryExA
InitializeSListHead
RaiseException
GetSystemInfo
FindNextFileW
IsProcessorFeaturePresent
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
ReadFile
VirtualProtect
VirtualQuery
GetTickCount
SleepEx
GetVersionExA
LeaveCriticalSection
GetUserDefaultUILanguage
LCIDToLocaleName
ExitProcess
GetFileAttributesExA
FindFirstFileA
GetModuleFileNameW
GetThreadLocale
FindNextFileA
FindClose
GetLastError
GetModuleHandleW
OutputDebugStringA
GetCommandLineW
Sleep
LoadLibraryW
GetProcAddress
LocalFree
SetDllDirectoryW
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
GetPhysicallyInstalledSystemMemory
GetCurrentProcess
SetEnvironmentVariableW
DuplicateHandle
CloseHandle
GlobalMemoryStatusEx
CreateProcessW
LoadLibraryA
FreeLibrary
WaitForSingleObject
SetLastError
FormatMessageA
GetStdHandle
GetFileType
WriteFile
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
CommandLineToArgvW
SHGetFolderPathA
ShellExecuteExA
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?get_new_handler@std@@YAP6AXXZXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Xbad_function_call@std@@YAXXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Strxfrm
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Winerror_message@std@@YAKKPEADK@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Strcoll
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_purecall
__C_specific_handler
memchr
memcmp
strrchr
memmove
strstr
__std_terminate
memset
memcpy
wcsstr
strchr
__CxxFrameHandler3
setvbuf
fputc
fopen_s
fwrite
_open
fflush
ferror
_setmode
_fileno
feof
_wfopen
fseek
ftell
_lseeki64
ungetc
__stdio_common_vsnprintf_s
fgetc
__stdio_common_vsscanf
_wfopen_s
fputs
fopen
fgets
_set_fmode
fsetpos
fread
__stdio_common_vswprintf
_fseeki64
__p__commode
__acrt_iob_func
_close
_read
_write
fgetpos
fclose
_get_stream_buffer_pointers
__stdio_common_vsprintf_s
__stdio_common_vfprintf
fgetws
__stdio_common_vsprintf
realloc
_set_new_mode
malloc
calloc
free
wcstoul
atof
strtoul
strtol
atoi
_strtoi64
terminate
_seh_filter_exe
_cexit
_beginthreadex
_register_thread_local_exe_atexit_callback
_set_app_type
_register_onexit_function
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
abort
_initterm
_initterm_e
_set_abort_behavior
_exit
_invalid_parameter_noinfo_noreturn
__sys_nerr
exit
strerror
signal
_errno
_initialize_onexit_table
raise
_c_exit
_crt_atexit
_stat64
_stat64i32
_lock_file
_fstat64
_unlock_file
strftime
_gmtime64
_localtime64_s
_time64
toupper
isgraph
isprint
islower
_strdup
_strnicmp
isupper
_stricmp
isalnum
isspace
isalpha
strcmp
strncpy
strncmp
wcscat_s
tolower
strcpy_s
isxdigit
isdigit
qsort
getenv
__setusermatherr
_getch
___lc_codepage_func
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ