Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
4b9faef52a2ae3eac8654aa4fb37feee6358d33af99bc69aa7c94d48dc54e286.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4b9faef52a2ae3eac8654aa4fb37feee6358d33af99bc69aa7c94d48dc54e286.exe
Resource
win10v2004-20230220-en
Target
4b9faef52a2ae3eac8654aa4fb37feee6358d33af99bc69aa7c94d48dc54e286
Size
1.2MB
MD5
615356d2bf299633db1736600de519b1
SHA1
eca2ac5c05650f4c4ede957d7f34480c1a506c14
SHA256
4b9faef52a2ae3eac8654aa4fb37feee6358d33af99bc69aa7c94d48dc54e286
SHA512
549fa5ac1ad870502a84b382e48e004e90bed5b22c226ad511dda8e2ceb628199eb3d358c5c5a54ad0100280a7965750d9942a9a125eed540bac2996611998ba
SSDEEP
24576:2nTDFQmJkkSTjrbIBq88EhYEipS/r0YJTWGNDAIzF0i59TuCWgbveB0NwZ7f2m8W:kT5ZakS7HcgS/rbFWu70i59TuCWUrwdL
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
PathIsNetworkPathW
PathFileExistsW
CertFreeCertificateContext
CryptMsgClose
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
InterlockedIncrement
MoveFileExW
GetTempPathW
CreateFileW
FileTimeToSystemTime
LocalFree
GetUserDefaultLangID
WriteFile
SetFilePointer
GetCurrentThreadId
GetLocalTime
QueryDosDeviceW
GetEnvironmentVariableW
GetLogicalDriveStringsW
VirtualQuery
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
DeleteFileW
MoveFileW
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetFileTime
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
HeapAlloc
GlobalFree
GlobalAlloc
CreateMutexW
WaitForMultipleObjects
GetModuleFileNameW
GetModuleHandleW
GetProcessHeap
GetProcAddress
InterlockedDecrement
HeapFree
OpenMutexW
GetCurrentProcessId
FindResourceW
LoadResource
GetSystemInfo
LockResource
lstrcmpiW
DeviceIoControl
InterlockedExchange
SetLastError
GlobalMemoryStatusEx
InitializeSListHead
ResumeThread
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
GetComputerNameW
GetTempFileNameW
CopyFileW
GetWindowsDirectoryW
GetCurrentDirectoryW
SetFileAttributesW
ExpandEnvironmentStringsW
GetFileAttributesW
GetVolumeInformationW
GetDiskFreeSpaceW
GetDriveTypeW
FindFirstFileW
GetLongPathNameW
CloseHandle
GetLastError
Sleep
GetFileAttributesExW
GetCurrentProcess
FindNextFileW
FindClose
GetFileSizeEx
OpenProcess
CreateDirectoryW
GetFullPathNameW
RemoveDirectoryW
OpenFileMappingW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
SearchPathW
TerminateProcess
InterlockedExchangeAdd
CreateEventW
SetEvent
ResetEvent
CreateProcessW
GetExitCodeProcess
GetACP
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryW
FreeLibrary
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
GetVersionExW
GetWindowLongW
IsWindowVisible
SendMessageW
wsprintfW
IsWindow
ShowWindow
SetForegroundWindow
DeleteService
CreateServiceW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
ChangeServiceConfig2W
ControlService
StartServiceW
OpenServiceW
SHGetPathFromIDListW
SHGetFolderPathW
ShellExecuteW
SHChangeNotify
CoCreateInstance
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Facet_base@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Strcoll
??_7facet@locale@std@@6B@
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Strxfrm
??_7_Facet_base@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
wcsrchr
strchr
wcschr
memchr
__CxxFrameHandler3
__std_type_info_name
__std_exception_destroy
wcsstr
memmove
memcpy
memset
_CxxThrowException
_except_handler4_common
_purecall
strstr
__std_exception_copy
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__p__commode
__stdio_common_vswprintf_s
__stdio_common_vsscanf
__stdio_common_vswscanf
__stdio_common_vsprintf
_set_fmode
rewind
fclose
fputws
_wfopen
ftell
fopen
fseek
fread
_wfopen_s
fwrite
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_set_app_type
_errno
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_controlfp_s
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initterm_e
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
exit
_exit
_beginthreadex
malloc
free
realloc
_callnewh
calloc
_set_new_mode
atoi
wcstoul
_wtoi
_configthreadlocale
setlocale
isalnum
_wcsicmp
towupper
towlower
_wcsnicmp
wcsncpy
_stricmp
tolower
rand
srand
_mktime64
_localtime64
_time64
_localtime64_s
_splitpath_s
modf
_except1
__setusermatherr
_dtest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ