Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
game.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
game.exe
Resource
win10v2004-20221111-en
Target
game.exe
Size
16.3MB
MD5
cee8e940fbd8ec980710be78458553df
SHA1
31558863db456b86e5fb816c815c9906e2306efb
SHA256
bdb250980032d7bfc4c7ec6eb6d333f005f3fcbd769005462ce7907dab8c905a
SHA512
11a62588f9fd8c1ca6dc03fb7602e91e6ff3da91907c392420bdee22f72eb784fec49b9df18e9ff1e96375d7d972ac6002bc0bfc5b65926a96708af6fecd6786
SSDEEP
196608:gNXdz5HELkOFWu3tOlXP1uvCCQGFX+xPqEcX3V5OWtbDZesoujMZE8HetXZJi3ca:gP5HELCu9+XP1qX0iZnVc22Ztui3vxCe
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
SERIALNUMBER=1200-01-077023,CN=CAPCOM CO.\, LTD.,O=CAPCOM CO.\, LTD.,L=Osaka-shi,ST=Osaka,C=JP,1.3.6.1.4.1.311.60.2.1.3=#13024a50,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetConsoleCP
FlushFileBuffers
FreeEnvironmentStringsW
SetEnvironmentVariableA
Sleep
SetEvent
ResetEvent
GetCurrentThreadId
SetStdHandle
HeapReAlloc
HeapSize
WriteConsoleW
GetLastError
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
MultiByteToWideChar
IsDBCSLeadByteEx
GetLocaleInfoA
MoveFileExW
DeleteFileW
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
WaitForSingleObject
CompareStringA
WideCharToMultiByte
LCMapStringW
CompareStringW
GetStringTypeW
GetFileType
SetFilePointerEx
GetConsoleMode
FreeLibraryAndExitThread
ExitThread
GetACP
GetModuleHandleExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
CreateSemaphoreW
CreateFileW
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetVersionExA
lstrlenW
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
K32GetModuleFileNameExA
GlobalFree
CreateProcessA
TerminateProcess
GetCurrentProcess
GetStdHandle
ReleaseSemaphore
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
VirtualProtect
VirtualFree
VirtualAlloc
GetNativeSystemInfo
GetCurrentThread
GetComputerNameA
LoadLibraryW
GetUserDefaultLangID
SetThreadExecutionState
GetCommandLineA
TryEnterCriticalSection
CreateMutexA
ReleaseMutex
VerifyVersionInfoA
VerSetConditionMask
GetSystemInfo
ExitProcess
CreateSemaphoreA
WaitForMultipleObjects
GetCurrentProcessId
CreateEventA
DebugBreak
GetTempFileNameA
GetTempPathA
GetOverlappedResult
GetFullPathNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
SetThreadIdealProcessor
GetThreadId
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetLocaleInfoW
EnterCriticalSection
ResumeThread
GetExitCodeThread
SetThreadPriority
SetCurrentDirectoryA
CreateDirectoryA
CreateFileA
DeleteFileA
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileSize
ReadFile
ReadFileEx
SetEndOfFile
SetFilePointer
WriteFile
CloseHandle
SleepEx
GetModuleFileNameA
CopyFileA
MoveFileA
FileTimeToSystemTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetCommandLineW
RaiseException
InitializeCriticalSectionEx
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
CreateThread
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
MessageBoxW
SetWindowLongPtrA
MoveWindow
MonitorFromWindow
GetMonitorInfoA
GetKeyboardLayout
SetForegroundWindow
SetFocus
ShowWindow
CallWindowProcA
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
SendMessageW
PostMessageA
PostQuitMessage
GetFocus
GetPropA
DefWindowProcW
UnregisterHotKey
RegisterHotKey
SystemParametersInfoA
LoadIconW
LoadIconA
LoadCursorA
FindWindowW
SetCursor
ShowCursor
MessageBoxA
RemovePropA
SetPropA
EndPaint
BeginPaint
UpdateWindow
DeleteMenu
EnableMenuItem
GetSystemMenu
LoadAcceleratorsA
SendInput
DestroyWindow
CreateWindowExW
CreateWindowExA
RegisterClassExW
RegisterClassExA
ScreenToClient
ClientToScreen
ClipCursor
GetCursorPos
SetCursorPos
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
ChangeDisplaySettingsExA
SetWindowLongA
AdjustWindowRect
GetWindowRect
GetClientRect
GetSystemMetrics
IsIconic
DefWindowProcA
SetWindowPos
UnregisterDeviceNotification
RegisterDeviceNotificationA
GetWindowThreadProcessId
GetForegroundWindow
GetCaretBlinkTime
GetAsyncKeyState
CloseClipboard
SetClipboardData
EmptyClipboard
CharUpperBuffW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
DragAcceptFiles
CommandLineToArgvW
SHAppBarMessage
ShellExecuteA
CoInitializeSecurity
CoTaskMemAlloc
CoSetProxyBlanket
CoUninitialize
CoInitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree
SysAllocString
VariantInit
VariantClear
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SysFreeString
ImmNotifyIME
ImmGetCompositionStringA
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmSetCompositionStringA
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmReleaseContext
ImmGetCompositionStringW
ImmAssociateContext
ImmGetDefaultIMEWnd
D3DDisassemble
D3DReflect
D3D11CreateDeviceAndSwapChain
D3D11CreateDevice
CreateDXGIFactory1
DirectInput8Create
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallback
SteamInternal_FindOrCreateUserInterface
SteamInternal_ContextInit
SteamAPI_GetHSteamUser
SteamAPI_RunCallbacks
SteamAPI_UnregisterCallResult
SteamAPI_Init
SteamAPI_Shutdown
SteamInternal_CreateInterface
inet_addr
WSAGetLastError
WSACreateEvent
WSAStartup
WSACleanup
bind
closesocket
ioctlsocket
getsockname
setsockopt
socket
__WSAFDIsSet
accept
connect
getsockopt
listen
recv
select
send
sendto
recvfrom
GetAdaptersInfo
GetAdaptersAddresses
NotifyAddrChange
WinHttpQueryHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpSetCredentials
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpSetOption
WinHttpWriteData
WinHttpReadData
WinHttpSetStatusCallback
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
ICCompressorChoose
ICCompressorFree
AVIStreamWrite
AVIFileCreateStreamA
AVIFileOpenA
AVIFileRelease
AVIFileExit
AVIFileInit
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamRelease
timeBeginPeriod
timeGetTime
timeGetDevCaps
timeEndPeriod
WMCreateWriter
WMCreateProfileManager
WMCreateSyncReader
GdiplusStartup
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipFree
GdipSaveImageToFile
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipAlloc
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
DwmGetWindowAttribute
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
GetStockObject
HidD_GetSerialNumberString
HidD_GetProductString
HidD_GetManufacturerString
HidD_SetFeature
HidD_GetFeature
HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetHidGuid
HidD_GetAttributes
HidP_GetValueCaps
HidP_GetCaps
CHECKSUMAPI_OBFUSCATE_HIGH_CODEMARKER
CHECKSUMAPI_OBFUSCATE_LOW_CODEMARKER
CHECKSUMAPI_OBFUSCATE_MAXIMUM_CODEMARKER
CHECKSUMAPI_OBFUSCATE_NORMAL_CODEMARKER
NvOptimusEnablement
�Ъ�)��ь���̊�V� ��|�&s=��o=IB;�^aK*���`Q�8�"���a���p�V�f���zͱ�G���~$t�t�\�zE�����bҜ�a��u� �/����� ���������#��ϼ�� ��ל76�Iw:�W� ��o�S�����W���Mx�@�bM0��D ���A4g (Y����c ����_*,����́W%/K�F��1�m�o��)}qw�`�T����R�ɨ��ށ����]��n���A��5��\O��l"�}i�O,�#��)4���,cs������� G)'{{Fy�kP�ΐG�H���sR������v���i�~��w<�\�L��p��@ϓ�y����Bx�L��t{�s\�DP��ː�_�y�P�/&,��!�~lZ�uj�s) ���X%=�"�|�ԚX�����[�J/�."�V�M詆Q�v�.��F���8?���Mw���M��8d�'��G'gn��~ZR��C����;�`�b���� �FL!��p��͛G#��з�u��t����c!0�ƫ�?W���Gͬ��>��\?�0y@0��LΫȋ����Rl�A�1*Xh����Ȣm�(��a�� �݅�˺����l�����t�Ǜ5�{>��ST�EO9_���yLD�5x�OmA�����E}q7ޥX&ݔ���N�U����f������1e�Co0U#�HKm�AGҭ���%� "S��`�.�[=�|�ImK��g,�����GV����ğf�ʗ~��� �G�� =E�����AGS�֣��џ�J����V�����1-~�临O�1s�+����� 6�~��y����Zp���W�-�)� jSx|*�&{tc`���|�t.4;�TNb��*��k*���Fj=�C�pRl��5N�a4�Pr�������?�� �#��p{���Ikr��ꉱ��9�W�!&l�����q#8�aQ�]���6&��p��$��d�@R7Ϩ#&�@?@�Y.��.전�d *���s���s��icy�ӤP}�A�؈���Xdz��ؖ��NܦX�|����k�% ?/�k� m����' ���r6���z\L�B����^�\{Ur�H¶k/��\'����:�D���*}���/b��W�6�)67����0�f↠���<f.Ĩ�#R��떙� ��S{� ]����MV���" �ִbsY^ҳ�bB�_��o�q��:Ŏ}�`gu�9�� '�1�"*�%�4��\�����6�ˍ59�ò���]|k�n=m����3reuBS�4�P7���x�����T"��S7�Z��m�ʀwVi�hj�6>�_��=/}���q����M�,��<�/�7,��������z�,6�jN����^`1:t�8j�% G,֜�@����aX���<���Q���Zl@�'����N�I�P��= �C��r �d�co���n�֒4Y�?[cZ%��I���|ޭ��`�0@lJs8�51Sm&��!��}I���(HKI���U��ݙ�y� ��g���Lo���'_$b�,�b���C;#1qc``s����D��;���B���L�?���zN�?�ͽ��Ť(�[�rk��ٯֹV��%��Sej��]���Ae ����dNI�F��gij�L&[�~�D(�_�����[K���t��p�����C��C�J�2~�m��G|�-��N������Z`WGc�a���j�xC�K���ɦ��O�&ow]rT���v�^���0D�Hȧ�eX��� ��i* Z�U<]�Ͻ�1��$V���Mi7̙,⬩u�o��(�����k�i��[�A��;D��/1}q��H��z�hh�X�$Ѓ�օ�+��,��*f���M����p����M̆�q@|5<^�27���2�V83:����bdĘ�Gun;0탮����YZ(��{���笥������n���}S�s�K�Rp�k{=l��et��!��8{�ǯ�W�9ˈfpb~M^�8-�:��uHk��cr��W��cY�8��M�S!��ݿ �5��i@�h@1ԝ}�h� �ː�O�4�A�u�V�=x5uU����(Դ�3�|t�8b8�x�H�S5ދ�@�� k� j���S�a����A����(�:5#-�H�`�RD�Ӡ�-�&�O}�8�Ja����ԀaeNG>;Vg�%sk� �:'�v���1Kp��q���1@�R�bu�_d˭�˂�Ŭ�%C:�����M�9�����nݺU��+��Y��W<�#ߜ���;��˻�j�?��~ROb���Zn3�����~��s���@3������A�^���Ph^l�_�3�«eC��;J�����_�_��5;~{-���O�é ���_F���ю%� ������YZ}}r�;�-��^�j���*ߗ2y�i.�x�Ӽ��֜ur�R���V�5b���+Ō�T����Yyڂ��'�����L "�:�;�@UR������� N�3_��R#�Z ..�K��Y0���2d���t�'?��mّ��u:1��*�wnQ���V|���8ن�(��?�(n��U�g���Gv�BA��>���!u��6� E�}��I ��d�^B��H�:H�����&��$�2����?}E����e�ƿ��.D�T'�}��VZ߃��g&����B��z)���*V�����R"]��Ǧڮm�r�3����v(�{ m��/0%1�ɻ`9}+ȍqH���������u��Wo4ĝ����=��.$��'����b��a ��T������@�~�K�&��Y'�{9� ���1(n�����G�X�P).P~r'H�����xu[ɝ��B\�i4��W�e�L�#��O�W�ghjM�47�1��_�,�G����L�L"U\��Vd��Q��("z2���_�)�PDAo��#����W,��X�p`$�{�h�(�i��V~�r�|��;Ϊs�;)��%z���L-t����V����w���<TQ��{Vm�>���x��9ށJ���'4 '��Et�G ��P�Q���Z����N
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ