Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a35c4ce4f13288212da95a78963e005a053a9330b114734a7e82c7558db49c55.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a35c4ce4f13288212da95a78963e005a053a9330b114734a7e82c7558db49c55.exe
Resource
win10v2004-20230221-en
Target
a35c4ce4f13288212da95a78963e005a053a9330b114734a7e82c7558db49c55
Size
1.3MB
MD5
a0be06a32ba647fcac7a37f4d75d7b76
SHA1
6499bbc02545615f63cbd8b8ec8f7f66356496fc
SHA256
a35c4ce4f13288212da95a78963e005a053a9330b114734a7e82c7558db49c55
SHA512
60cffb96fadc6557301b8612bea77ba1a089409e15df7f7b15219e974d6a553e64fbcbad321211c75ba46f16f6c2ecd68b7b906bb1b8eb3cd5704c78114eb909
SSDEEP
24576:4aphph2HFbRVqKeiGkn4Rwnvg2v67wf+UTr/yTPjtUWe3wNwXFdnFrWd7xN:4ah4VqaGkLoTATr/yTLtBwbnFrWd7xN
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
PathFileExistsW
PathIsNetworkPathW
CertFreeCertificateContext
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CryptMsgClose
GetModuleFileNameExW
GetProcessHeap
GetModuleHandleW
InterlockedIncrement
MoveFileExW
GetTempPathW
CreateFileW
FileTimeToSystemTime
LocalFree
GetUserDefaultLangID
WriteFile
SetFilePointer
GetCurrentThreadId
GetLocalTime
QueryDosDeviceW
GetEnvironmentVariableW
GetLogicalDriveStringsW
VirtualQuery
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
DeleteFileW
MoveFileW
InitializeCriticalSectionAndSpinCount
ReadFile
SetEndOfFile
GetFileSize
GetComputerNameW
GetTickCount
SetEvent
lstrlenW
InterlockedExchange
InterlockedExchangeAdd
SetLastError
LoadLibraryW
GlobalMemoryStatusEx
FreeLibrary
ExpandEnvironmentStringsW
WaitForMultipleObjects
GetCurrentProcess
GetFileAttributesW
CopyFileW
GetLongPathNameW
InterlockedDecrement
GetDriveTypeW
GetDiskFreeSpaceW
GetVolumeInformationW
CreateEventW
ResetEvent
GetModuleFileNameW
GetFileAttributesExW
GetProcAddress
HeapFree
OpenMutexW
GetCurrentProcessId
CloseHandle
GetLastError
Sleep
OpenProcess
CreateProcessW
GetExitCodeProcess
GetACP
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryExW
GetTempFileNameW
DeviceIoControl
FormatMessageW
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
GetWindowsDirectoryW
GetCurrentDirectoryW
SetFileAttributesW
RemoveDirectoryW
GetFullPathNameW
CreateDirectoryW
GetFileSizeEx
ResumeThread
FindClose
FindFirstFileW
CreateMutexW
OpenFileMappingW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
SearchPathW
TerminateProcess
GetVersionExW
FindNextFileW
GetFileTime
SetFileTime
HeapAlloc
GlobalFree
GlobalAlloc
FindResourceW
LoadResource
GetSystemInfo
LockResource
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
wsprintfW
SetForegroundWindow
IsWindow
ShowWindow
SendMessageW
IsWindowVisible
GetWindowLongW
RegCreateKeyExW
CreateServiceW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
ChangeServiceConfig2W
DeleteService
ControlService
StartServiceW
OpenServiceW
ShellExecuteW
SHChangeNotify
SHGetPathFromIDListW
SHGetFolderPathW
CoCreateInstance
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?uncaught_exception@std@@YA_NXZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Facet_base@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Strcoll
??_7facet@locale@std@@6B@
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Strxfrm
??_7_Facet_base@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
__std_exception_destroy
__std_exception_copy
strchr
__std_type_info_name
__CxxFrameHandler3
wcsrchr
wcschr
wcsstr
strstr
_except_handler4_common
_CxxThrowException
memset
memmove
memcpy
memchr
_purecall
__stdio_common_vswprintf_s
__stdio_common_vswscanf
_set_fmode
__p__commode
__stdio_common_vswprintf
__stdio_common_vsscanf
fclose
fputws
__stdio_common_vsprintf_s
__stdio_common_vsprintf
_wfopen
ftell
fopen
fseek
fread
fwrite
rewind
_wfopen_s
_initialize_onexit_table
_register_onexit_function
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_errno
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_crt_atexit
_set_app_type
_seh_filter_exe
_invalid_parameter_noinfo
_controlfp_s
_beginthreadex
_invalid_parameter_noinfo_noreturn
terminate
malloc
calloc
realloc
_set_new_mode
free
_callnewh
wcstoul
atoi
_wtoi
setlocale
_configthreadlocale
wcsncpy
tolower
_stricmp
_wcsicmp
_wcsnicmp
towlower
towupper
isalnum
_localtime64_s
_localtime64
_time64
_mktime64
rand
srand
_splitpath_s
modf
_dtest
__setusermatherr
_except1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ