Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f45212005718edc2a3b76598140cc30e0c69662ca39a225829b27d98fb1f63c0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f45212005718edc2a3b76598140cc30e0c69662ca39a225829b27d98fb1f63c0.exe
Resource
win10v2004-20230220-en
Target
f45212005718edc2a3b76598140cc30e0c69662ca39a225829b27d98fb1f63c0
Size
1.3MB
MD5
5c77cdcdad290b5f2514ff6d67196f3c
SHA1
75c51151436ae2bc2fc5d247b6d3321a06173518
SHA256
f45212005718edc2a3b76598140cc30e0c69662ca39a225829b27d98fb1f63c0
SHA512
b414275704aad4ea2fa0296f1205e0624254e93d57522296743fc174f34e9e68b27426edc428880ceb79e170a707335390acee23b5b9523c7194ad65abe7ec7a
SSDEEP
24576:7sUe/aPtwmZplX7eJnxBJEUGHwTD2/txFVgdv70sI4TIzYagmxweBUUH55z1bo60:4UcmwmJ2HGHwG/1VmgsI4TIzY9mB591m
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
PathIsNetworkPathW
PathFileExistsW
CertFreeCertificateContext
CryptMsgClose
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
InterlockedIncrement
MoveFileExW
GetTempPathW
CreateFileW
FileTimeToSystemTime
LocalFree
GetUserDefaultLangID
WriteFile
SetFilePointer
GetCurrentThreadId
GetLocalTime
QueryDosDeviceW
GetEnvironmentVariableW
GetLogicalDriveStringsW
VirtualQuery
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
DeleteFileW
MoveFileW
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetFileTime
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
HeapAlloc
GlobalFree
GlobalAlloc
CreateMutexW
WaitForMultipleObjects
GetModuleFileNameW
GetModuleHandleW
GetProcessHeap
GetProcAddress
InterlockedDecrement
HeapFree
OpenMutexW
GetCurrentProcessId
FindResourceW
LoadResource
GetSystemInfo
LockResource
lstrcmpiW
DeviceIoControl
InterlockedExchange
SetLastError
GlobalMemoryStatusEx
InitializeSListHead
ResumeThread
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
GetComputerNameW
GetTempFileNameW
CopyFileW
GetWindowsDirectoryW
GetCurrentDirectoryW
SetFileAttributesW
ExpandEnvironmentStringsW
GetFileAttributesW
GetVolumeInformationW
GetDiskFreeSpaceW
GetDriveTypeW
FindFirstFileW
GetLongPathNameW
CloseHandle
GetLastError
Sleep
GetFileAttributesExW
GetCurrentProcess
FindNextFileW
FindClose
GetFileSizeEx
OpenProcess
CreateDirectoryW
GetFullPathNameW
RemoveDirectoryW
OpenFileMappingW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
SearchPathW
TerminateProcess
InterlockedExchangeAdd
CreateEventW
SetEvent
ResetEvent
CreateProcessW
GetExitCodeProcess
GetACP
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryW
FreeLibrary
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
GetVersionExW
GetWindowLongW
IsWindowVisible
SendMessageW
wsprintfW
IsWindow
ShowWindow
SetForegroundWindow
DeleteService
CreateServiceW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
ChangeServiceConfig2W
ControlService
StartServiceW
OpenServiceW
SHGetPathFromIDListW
SHGetFolderPathW
ShellExecuteW
SHChangeNotify
CoCreateInstance
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Facet_base@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Strcoll
??_7facet@locale@std@@6B@
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Strxfrm
??_7_Facet_base@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
wcsrchr
strchr
wcschr
memchr
__CxxFrameHandler3
__std_type_info_name
__std_exception_destroy
wcsstr
memmove
memcpy
memset
_CxxThrowException
_except_handler4_common
_purecall
strstr
__std_exception_copy
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__p__commode
__stdio_common_vswprintf_s
__stdio_common_vsscanf
__stdio_common_vswscanf
__stdio_common_vsprintf
_set_fmode
rewind
fclose
fputws
_wfopen
ftell
fopen
fseek
fread
_wfopen_s
fwrite
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_set_app_type
_errno
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_controlfp_s
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initterm_e
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
exit
_exit
_beginthreadex
malloc
free
realloc
_callnewh
calloc
_set_new_mode
atoi
wcstoul
_wtoi
_configthreadlocale
setlocale
isalnum
_wcsicmp
towupper
towlower
_wcsnicmp
wcsncpy
_stricmp
tolower
rand
srand
_mktime64
_localtime64
_time64
_localtime64_s
_splitpath_s
modf
_except1
__setusermatherr
_dtest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ