Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
79d86b50fea1c4c2139ea3a3500c26bb507074a5f13847f1ac13d02488a5684a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
79d86b50fea1c4c2139ea3a3500c26bb507074a5f13847f1ac13d02488a5684a.exe
Resource
win10v2004-20230220-en
Target
79d86b50fea1c4c2139ea3a3500c26bb507074a5f13847f1ac13d02488a5684a
Size
1.4MB
MD5
cd8618a10fe0522744b59b0ecb5dbf4e
SHA1
31edf543f44e987db045d06639083e1ec0b86c44
SHA256
79d86b50fea1c4c2139ea3a3500c26bb507074a5f13847f1ac13d02488a5684a
SHA512
fb050a90a1f5d536dcb225b33b0a12f91a3987cdef3733dccdae71c97c0da729549c9363fecf86138d8e283965fd8e10178126740cb1d6028290253d89478c87
SSDEEP
24576:4tmCDIEIcknbuUWcyGI6Rg0v1SCn7zHotulgi95Tqhl7oQqruUH55z1bi9bMoE2P:QkJfRg0v1SwHoslgi95Tqh16591bkMoh
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
PathIsNetworkPathW
PathFileExistsW
MoveFileExW
GetTempPathW
Sleep
GetModuleHandleW
GetProcAddress
GetDriveTypeW
GetCurrentProcess
GetTickCount
OpenProcess
GetSystemDirectoryW
FileTimeToSystemTime
CreateFileW
GetLocalTime
DeviceIoControl
GetCurrentThreadId
LocalFree
SetFilePointer
WriteFile
GetEnvironmentVariableW
VirtualQuery
GetLogicalDriveStringsW
QueryDosDeviceW
GetModuleFileNameW
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
InitializeCriticalSectionAndSpinCount
MoveFileW
DeleteFileW
GlobalMemoryStatusEx
SetLastError
InterlockedExchange
FormatMessageW
InterlockedExchangeAdd
GetComputerNameW
ResumeThread
CreateProcessW
GetExitCodeProcess
SearchPathW
SetEvent
ResetEvent
CreateEventW
GetDiskFreeSpaceW
GetVolumeInformationW
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetProcessHeap
HeapFree
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
CloseHandle
WaitForMultipleObjects
GetLastError
CreateMutexW
DecodePointer
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetUserDefaultLangID
GetSystemTimeAsFileTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
TerminateProcess
WideCharToMultiByte
OutputDebugStringW
GetACP
MultiByteToWideChar
GetFileAttributesW
FreeLibrary
LoadLibraryExW
LoadLibraryW
FindResourceW
LoadResource
GetVersionExW
LockResource
GetSystemInfo
lstrcmpiW
lstrlenW
HeapAlloc
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
GetFileTime
FindClose
FindNextFileW
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
CopyFileW
GetCurrentDirectoryW
ExpandEnvironmentStringsW
RemoveDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
GetFileSizeEx
SetForegroundWindow
GetWindowLongW
ShowWindow
IsWindow
IsWindowVisible
SendMessageW
ControlService
QueryServiceStatus
StartServiceW
ChangeServiceConfig2W
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW
SHChangeNotify
SHGetFolderPathW
ShellExecuteW
SHGetPathFromIDListW
CoCreateInstance
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Facet_base@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??_7_Facet_base@std@@6B@
_Strxfrm
??_7facet@locale@std@@6B@
_Strcoll
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@D@std@@2V0locale@2@A
??1_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
_beginthreadex
_localtime64_s
sprintf
sscanf
swscanf_s
wcstoul
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CxxFrameHandler3
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_wcsicmp
wcsncpy
isalnum
tolower
_splitpath_s
_stricmp
_localtime64
_mktime64
strstr
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
calloc
_vswprintf_c_l
_wtoi
?terminate@@YAXXZ
_errno
_wcsnicmp
_time64
srand
rand
towupper
_vsnwprintf
wcsstr
towlower
wcschr
fwrite
rewind
_wfopen_s
setlocale
fputws
_wfopen
fclose
fseek
ftell
fread
fopen
wcsrchr
malloc
??_V@YAXPAX@Z
atoi
realloc
memchr
strchr
free
_except1
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
memcpy_s
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
vswprintf_s
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memmove
modf
sprintf_s
_dtest
memcpy
memset
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ