Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
39855c53756baf2765f1b0917c8156ea3e2a343ecffc86b8bdcd40d3409e52db.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
39855c53756baf2765f1b0917c8156ea3e2a343ecffc86b8bdcd40d3409e52db.exe
Resource
win10v2004-20230220-en
Target
39855c53756baf2765f1b0917c8156ea3e2a343ecffc86b8bdcd40d3409e52db
Size
1.3MB
MD5
6ed1c23863bba31620c3db29fd074a4f
SHA1
c9bc53dc86530b6876b518888f84e9af6f9524d7
SHA256
39855c53756baf2765f1b0917c8156ea3e2a343ecffc86b8bdcd40d3409e52db
SHA512
3cb971d94ddec59e512fc76167a8bad1bfa3664a9dea47de2d2964e1da866896ad924d061ef631e4005a95dde73319ecc4a74fd6b14aa286386431141b5b0171
SSDEEP
24576:qqCwDB/9yJPF/4RcwTfKgx3UwuTui0dkxryMNw3jcnoDHkwB:bDDB/9yJPR4+w7KuUwuTadkZwTqoDHk4
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?Start@RCSQLiteUpdateDMgr@RC@@SAXXZ
?Stop@RCSQLiteUpdateDMgr@RC@@SAXXZ
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
GdiplusShutdown
GdiplusStartup
ImmDisableIME
?Start@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAE?AVRCReturnValue@23@ABURCConfigCenterSetting@23@@Z
?Stop@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAE?AVRCReturnValue@23@XZ
?GetInstance@RCBasicBusinessConfigCenterDMgr@DM@RC@@SAAAV123@XZ
InterlockedExchangeAdd
lstrlenW
LoadLibraryW
GlobalMemoryStatusEx
FreeLibrary
ExpandEnvironmentStringsW
GetVersionExW
InitializeCriticalSectionAndSpinCount
LocalFree
GetFileAttributesW
GetModuleHandleExW
FileTimeToSystemTime
FindClose
FindNextFileW
lstrcmpiW
FindResourceW
LoadResource
GetSystemInfo
LockResource
ResetEvent
InterlockedExchange
HeapFree
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
GetDiskFreeSpaceW
GetVolumeInformationW
LoadLibraryExW
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetEvent
ReleaseMutex
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
CreateProcessW
OpenProcess
GetCurrentProcess
GetDriveTypeW
SetLastError
CreateEventW
WaitForSingleObject
WaitForMultipleObjects
GetFileSize
DeleteFileW
Sleep
SetEndOfFile
ReadFile
GetWindowsDirectoryW
CreateDirectoryW
HeapAlloc
GetFullPathNameW
GetTempPathW
SetFileAttributesW
GetCurrentDirectoryW
InterlockedIncrement
GetProcessHeap
VirtualQuery
GetLogicalDriveStringsW
GetEnvironmentVariableW
QueryDosDeviceW
GetUserDefaultLangID
GetCurrentProcessId
GetLocalTime
GetCurrentThreadId
CreateFileW
SetFilePointer
GetModuleFileNameW
WriteFile
CloseHandle
GetLastError
CreateMutexW
GetModuleHandleW
GetProcAddress
GetTickCount
SetFileTime
GetFileTime
ResumeThread
InterlockedDecrement
MapViewOfFile
GetFileSizeEx
DeviceIoControl
FormatMessageW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
SetThreadPriority
GetExitCodeThread
TlsAlloc
TlsSetValue
TlsFree
GetTimeZoneInformation
GetStartupInfoW
OutputDebugStringW
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
VirtualQueryEx
CreateSemaphoreW
CreateThread
TerminateThread
GetProcessId
ReleaseSemaphore
RtlCaptureContext
lstrcmpW
CreateEventA
LocalAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
wsprintfW
SHGetFolderPathW
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?classic@locale@std@@SAABV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
_Cnd_destroy_in_situ
_Cnd_broadcast
_Mtx_unlock
_Xtime_get_ticks
_Query_perf_counter
_Cnd_wait
_Cnd_register_at_thread_exit
_Mtx_init_in_situ
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_destroy_in_situ
?__ExceptionPtrToBool@@YA_NPBX@Z
_Cnd_timedwait
?_Syserror_map@std@@YAPBDH@Z
?_XGetLastError@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_C_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
_Query_perf_frequency
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_Cnd_init_in_situ
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_unregister_at_thread_exit
_Mtx_current_owns
??0task_continuation_context@Concurrency@@AAE@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
_Cnd_signal
PathFileExistsW
__std_exception_copy
_purecall
wcsrchr
__std_type_info_name
__std_exception_destroy
__CxxFrameHandler3
__std_terminate
wcschr
wcsstr
strstr
_except_handler4_common
_CxxThrowException
memset
memcpy
__std_type_info_compare
memmove
memchr
__RTtypeid
_set_purecall_handler
__RTDynamicCast
strchr
_initialize_wide_environment
_configure_wide_argv
_initterm
_set_app_type
_seh_filter_exe
_cexit
_initterm_e
strerror_s
_invalid_parameter_noinfo_noreturn
_set_invalid_parameter_handler
_exit
_errno
_crt_atexit
_register_onexit_function
_initialize_onexit_table
terminate
_c_exit
_controlfp_s
_get_wide_winmain_command_line
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo
exit
_beginthreadex
_mktime64
_time64
_localtime64
atoi
_itow_s
_wtoi
wcstoul
realloc
free
calloc
malloc
_callnewh
_set_new_mode
__stdio_common_vswprintf_s
fclose
fseek
rewind
fwrite
fread
__stdio_common_vsprintf_s
__acrt_iob_func
__stdio_common_vswprintf
__stdio_common_vswscanf
__p__commode
ftell
_set_fmode
__stdio_common_vsprintf
__stdio_common_vfprintf
__stdio_common_vsnwprintf_s
_wfopen_s
_stricmp
isspace
wcscpy_s
wcsncpy
_wcsnicmp
towlower
towupper
tolower
_wcsicmp
rand
srand
_splitpath_s
floor
_finite
_isnan
ceil
_except1
_dtest
__setusermatherr
_configthreadlocale
OpenServiceW
QueryServiceConfig2W
QueryServiceConfigW
EnumServicesStatusExW
StartServiceW
QueryServiceStatusEx
CreateServiceW
CloseServiceHandle
OpenSCManagerW
DeleteService
ControlService
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@$$QAV01@@Z
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@ABV01@@Z
?__autoclassinit2@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAEXI@Z
?__autoclassinit2@RCSQLiteRecordSet@RC@@QAEXI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ