Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
50ad1bccd959cd8406c8b98fa63603dddeff595c3002b68a490e52bd5969965c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
50ad1bccd959cd8406c8b98fa63603dddeff595c3002b68a490e52bd5969965c.exe
Resource
win10v2004-20230220-en
Target
50ad1bccd959cd8406c8b98fa63603dddeff595c3002b68a490e52bd5969965c
Size
861KB
MD5
d4a201d46cc8ebfef0227361fcb66e81
SHA1
2f830c2b80b1586edd9780c324279fef1e82a994
SHA256
50ad1bccd959cd8406c8b98fa63603dddeff595c3002b68a490e52bd5969965c
SHA512
6a7ac26edd6166da30435ddb52313b8893a29d6b04161755a7ed6692b249ac176b61c1b52dfdd7c16d8a39b99bdd176e714e27d3403bf50c281ebb267cf5d8d9
SSDEEP
24576:D12fiUSAnypZaYp8FBn34jyOzTanY+h5GXID5cU:D0DypZafFBbOzT65ZD5cU
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GdiplusShutdown
GdiplusStartup
HeapAlloc
GetModuleFileNameW
GetCurrentProcessId
CreateMutexW
GetLastError
CloseHandle
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
GetLocalTime
QueryDosDeviceW
GetEnvironmentVariableW
GetLogicalDriveStringsW
HeapFree
InterlockedDecrement
GetProcAddress
GetProcessHeap
GetModuleHandleW
InterlockedIncrement
ReadFile
SetEndOfFile
Sleep
DeleteFileW
GetFileSize
WaitForMultipleObjects
WaitForSingleObject
SetEvent
GetTickCount
InterlockedExchange
SetLastError
InterlockedExchangeAdd
lstrlenW
LoadLibraryW
GlobalMemoryStatusEx
FreeLibrary
ExpandEnvironmentStringsW
GetVersionExW
InitializeCriticalSectionAndSpinCount
LocalFree
GetFileAttributesW
OpenProcess
GetSystemInfo
LoadResource
LoadLibraryExW
OpenFileMappingW
UnmapViewOfFile
CreateFileMappingW
FindResourceW
lstrcmpiW
MapViewOfFile
DeleteCriticalSection
GetCurrentProcess
FindClose
FileTimeToSystemTime
CreateProcessW
ResumeThread
SetFileTime
GetFileTime
CreateDirectoryW
GetFullPathNameW
GetTempPathW
GetCurrentDirectoryW
CreateEventW
ResetEvent
DeviceIoControl
GetFileSizeEx
FormatMessageW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
FindFirstFileW
OutputDebugStringW
GetModuleHandleExW
GetLongPathNameW
GetFileAttributesExW
ReleaseMutex
GetACP
MultiByteToWideChar
FindNextFileW
WideCharToMultiByte
LockResource
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
wsprintfW
SetForegroundWindow
ShowWindow
SendMessageW
GetWindowLongW
IsWindow
CommandLineToArgvW
SHGetFolderPathW
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
wcsstr
__std_exception_destroy
__std_exception_copy
wcschr
_purecall
strstr
_except_handler4_common
_CxxThrowException
memset
memmove
wcsrchr
__CxxFrameHandler3
memcpy
memchr
__std_type_info_name
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_errno
_beginthreadex
_seh_filter_exe
_set_app_type
_configure_wide_argv
_controlfp_s
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_wide_environment
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_get_wide_winmain_command_line
_exit
exit
_initterm_e
_initterm
atoi
_wtoi
wcstoul
_callnewh
calloc
_set_new_mode
malloc
free
fread
__stdio_common_vsprintf_s
__p__commode
_set_fmode
__stdio_common_vswprintf
__stdio_common_vswscanf
rewind
fseek
fclose
ftell
_wfopen_s
__stdio_common_vsprintf
fwrite
_time64
_mktime64
_localtime64
srand
rand
_wcsnicmp
towupper
_stricmp
tolower
wcsncpy
towlower
_wcsicmp
_splitpath_s
_except1
__setusermatherr
_dtest
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ