Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
b0d16c60a7badff4335d31dca5beb20ffc75c99a7182d09f24dcfa5049cbc856.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b0d16c60a7badff4335d31dca5beb20ffc75c99a7182d09f24dcfa5049cbc856.exe
Resource
win10v2004-20230220-en
Target
b0d16c60a7badff4335d31dca5beb20ffc75c99a7182d09f24dcfa5049cbc856
Size
1.2MB
MD5
30af30c3ac279718e7215a200b90a51e
SHA1
92cf3dc84eda914b1c7303e06edbb77fcd797ae4
SHA256
b0d16c60a7badff4335d31dca5beb20ffc75c99a7182d09f24dcfa5049cbc856
SHA512
d52799012eb278cdaa2aed6dfbe237280686d23c29f3cfca7a4848cc2218f6b8b580afd0b839ae93d30ebb3d4a9ae224c542ba92ca381deeb2f6e21ed94ac7a8
SSDEEP
24576:IClHQTJa78p9i506f3HRA8pPTD27z8uZNwl6q1c6qB:zwTJlp9i50WhA8pPTa7z8Mw1c6qB
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?Start@RCSQLiteUpdateDMgr@RC@@SAXXZ
?Stop@RCSQLiteUpdateDMgr@RC@@SAXXZ
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GdiplusShutdown
GdiplusStartup
ImmDisableIME
?GetInstance@RCBasicBusinessConfigCenterDMgr@DM@RC@@SAAAV123@XZ
?Start@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAE?AVRCReturnValue@23@ABURCConfigCenterSetting@23@@Z
?Stop@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAE?AVRCReturnValue@23@XZ
CreateDirectoryW
InterlockedIncrement
GetProcessHeap
InterlockedDecrement
HeapFree
VirtualQuery
GetLogicalDriveStringsW
GetEnvironmentVariableW
QueryDosDeviceW
GetUserDefaultLangID
GetCurrentProcessId
GetLocalTime
GetCurrentThreadId
CreateFileW
SetFilePointer
GetModuleFileNameW
WriteFile
CloseHandle
GetLastError
CreateMutexW
GetModuleHandleW
GetProcAddress
TlsFree
TlsSetValue
GetModuleHandleExW
OutputDebugStringW
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
VirtualQueryEx
CreateSemaphoreW
CreateThread
TerminateThread
GetProcessId
ReleaseSemaphore
RtlCaptureContext
lstrcmpW
CreateEventA
LocalAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
TlsAlloc
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalMemoryStatusEx
SetLastError
InterlockedExchange
DeviceIoControl
FormatMessageW
ResumeThread
InitializeCriticalSectionAndSpinCount
GetTickCount
InterlockedExchangeAdd
GetFileSizeEx
SetThreadPriority
FileTimeToSystemTime
GetCurrentDirectoryW
DeleteFileW
SetFileAttributesW
GetTempPathW
lstrlenW
GetFullPathNameW
GetFileTime
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
HeapAlloc
FindClose
FindNextFileW
lstrcmpiW
FindResourceW
LoadResource
GetSystemInfo
LockResource
GetVersionExW
ResetEvent
SetEvent
CreateEventW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
GetDiskFreeSpaceW
GetVolumeInformationW
LoadLibraryExW
FreeLibrary
LoadLibraryW
LoadLibraryA
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ReleaseMutex
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
CreateProcessW
LocalFree
WaitForSingleObject
WaitForMultipleObjects
ExpandEnvironmentStringsW
OpenProcess
GetCurrentProcess
GetDriveTypeW
GetWindowsDirectoryW
GetExitCodeThread
GetTimeZoneInformation
InitializeSListHead
wsprintfW
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?classic@locale@std@@SAABV12@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Mtx_destroy_in_situ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
PathFileExistsW
__CxxFrameHandler3
__std_type_info_name
__std_terminate
wcschr
wcsstr
__RTDynamicCast
_set_purecall_handler
__RTtypeid
memchr
memmove
__std_type_info_compare
memcpy
memset
_CxxThrowException
_except_handler4_common
_purecall
strchr
strstr
__std_exception_copy
wcsrchr
__std_exception_destroy
_errno
_c_exit
_register_thread_local_exe_atexit_callback
_set_invalid_parameter_handler
_invalid_parameter_noinfo
strerror_s
_initterm_e
_initterm
_exit
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
terminate
_set_app_type
_seh_filter_exe
_cexit
_beginthreadex
_invalid_parameter_noinfo_noreturn
_controlfp_s
_initialize_onexit_table
_register_onexit_function
_crt_atexit
exit
_time64
_localtime64
_mktime64
atoi
_wtoi
_itow_s
wcstoul
malloc
calloc
free
_callnewh
realloc
_set_new_mode
__stdio_common_vswscanf
__stdio_common_vsprintf
_set_fmode
ftell
_wfopen_s
fclose
fseek
__p__commode
rewind
fwrite
fread
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
wcsncpy
_wcsicmp
tolower
_stricmp
wcscpy_s
isspace
towlower
towupper
_wcsnicmp
rand
srand
_splitpath_s
_except1
_dtest
_isnan
__setusermatherr
_finite
floor
ceil
_configthreadlocale
DeleteService
QueryServiceStatusEx
OpenServiceW
QueryServiceConfig2W
QueryServiceConfigW
EnumServicesStatusExW
StartServiceW
ControlService
OpenSCManagerW
CloseServiceHandle
CreateServiceW
SHGetFolderPathW
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@$$QAV01@@Z
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@ABV01@@Z
?__autoclassinit2@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAEXI@Z
?__autoclassinit2@RCSQLiteRecordSet@RC@@QAEXI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ