Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
30b4972b5646b6e4bb574d544ab24f456414b96a4515745619504365316b3062.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
30b4972b5646b6e4bb574d544ab24f456414b96a4515745619504365316b3062.exe
Resource
win10v2004-20230220-en
Target
30b4972b5646b6e4bb574d544ab24f456414b96a4515745619504365316b3062
Size
1.4MB
MD5
54511fd5fda6c21905ebb15bb82dd1c6
SHA1
b9ea09e1e9e48a53da5726d5e7b98f673ea267eb
SHA256
30b4972b5646b6e4bb574d544ab24f456414b96a4515745619504365316b3062
SHA512
8567a87e7e6a2f8b4c7f18a88fe4707d4bcb82af1931ad08e515f75a126c9e0b20e579120e2f1be0dc86a5216bcd4e44550a49e568922bfa71457eb700b03e27
SSDEEP
24576:DNeaRNyzh3ty0ET1bBEUKf2M3Zlmpmar6db5fzLMUAITfTnNqjzUH55z1bnVPp76:c9BEdKfVzvdb57LMUAITfT5591bVPpv2
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
PathIsNetworkPathW
PathFileExistsW
CryptMsgClose
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
MoveFileExW
GetTempPathW
Sleep
GetModuleHandleW
GetProcAddress
GetDriveTypeW
GetCurrentProcess
GetTickCount
OpenProcess
FileTimeToSystemTime
CreateFileW
GetLocalTime
DeviceIoControl
GetCurrentThreadId
LocalFree
SetFilePointer
WriteFile
CreateMutexW
VirtualQuery
GetLogicalDriveStringsW
QueryDosDeviceW
GetUserDefaultLangID
GetModuleFileNameW
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
InitializeCriticalSectionAndSpinCount
MoveFileW
DeleteFileW
GlobalMemoryStatusEx
SetLastError
InterlockedExchange
FormatMessageW
InterlockedExchangeAdd
GetComputerNameW
ResumeThread
CreateProcessW
GetExitCodeProcess
SearchPathW
GetFileAttributesW
SetEvent
ResetEvent
CreateEventW
GetDiskFreeSpaceW
GetVolumeInformationW
FindFirstFileW
GetLongPathNameW
GetProcessHeap
HeapFree
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
CloseHandle
WaitForMultipleObjects
GetLastError
DecodePointer
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetEnvironmentVariableW
GetSystemTimeAsFileTime
GetFileAttributesExW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
OutputDebugStringW
TerminateProcess
WideCharToMultiByte
GetACP
MultiByteToWideChar
FreeLibrary
LoadLibraryExW
LoadLibraryW
FindResourceW
LoadResource
GetVersionExW
LockResource
GetSystemInfo
lstrcmpiW
lstrlenW
HeapAlloc
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
GetFileTime
FindClose
ExpandEnvironmentStringsW
FindNextFileW
GetFileSizeEx
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
CopyFileW
GetCurrentDirectoryW
RemoveDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
SetForegroundWindow
GetWindowLongW
ShowWindow
IsWindow
IsWindowVisible
SendMessageW
ControlService
QueryServiceStatus
StartServiceW
ChangeServiceConfig2W
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW
SHChangeNotify
SHGetFolderPathW
ShellExecuteW
SHGetPathFromIDListW
CoCreateInstance
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??_7_Facet_base@std@@6B@
_Strxfrm
??_7facet@locale@std@@6B@
_Strcoll
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@D@std@@2V0locale@2@A
??1_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1_Facet_base@std@@UAE@XZ
isalnum
_beginthreadex
_localtime64_s
sprintf
sscanf
swscanf_s
wcstoul
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CxxFrameHandler3
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_wcsicmp
wcsncpy
tolower
_splitpath_s
_stricmp
_localtime64
_mktime64
strstr
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?terminate@@YAXXZ
calloc
_vswprintf_c_l
_wtoi
_errno
_wcsnicmp
_time64
srand
rand
towupper
_vsnwprintf
wcsstr
towlower
wcschr
fwrite
rewind
_wfopen_s
setlocale
fputws
_wfopen
fclose
fseek
ftell
fread
fopen
wcsrchr
malloc
??_V@YAXPAX@Z
atoi
realloc
memchr
strchr
free
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
memcpy_s
_except1
vswprintf_s
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memmove
modf
sprintf_s
_dtest
memcpy
memset
_CxxThrowException
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ