Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d74f03403a2f08ba8c6be24a4c3932c378554c616bc033c72e8697916083df4a.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d74f03403a2f08ba8c6be24a4c3932c378554c616bc033c72e8697916083df4a.dll
Resource
win10v2004-20230220-en
Target
d74f03403a2f08ba8c6be24a4c3932c378554c616bc033c72e8697916083df4a
Size
1.4MB
MD5
ef0b33085f964d0a56bce89a24da4dc3
SHA1
1983a9babb4fdca0a7971bf8ce862583508530e5
SHA256
d74f03403a2f08ba8c6be24a4c3932c378554c616bc033c72e8697916083df4a
SHA512
b5d0f13b25860ee3c22d9faf3cbed775168a0a9be951f235e1e811965c893c49b9d2f691449b6b2f1c8ecbc93be85b7ae6dd4d380ed84723538e9f8b88399985
SSDEEP
24576:pKAG6UYL3pzDAsm7J6oqiNYGfg65U1IsUaP9iT9Lgwh06YyK3mG:TjLpaJ6hZpIsboTJgwHYyK3mG
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
CryptQueryObject
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CryptDecodeObject
CertCloseStore
CertFreeCertificateContext
CryptMsgClose
LocalFree
GetProcessHeap
GetModuleHandleW
LocalAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleExW
CreateMutexW
ReleaseMutex
GetVolumeInformationW
IsBadWritePtr
SetLastError
VirtualFree
GetFullPathNameW
lstrlenW
GetDiskFreeSpaceW
DeviceIoControl
VirtualAlloc
GetCompressedFileSizeW
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetFileInformationByHandle
SetFilePointerEx
GetFileType
IsBadReadPtr
GetDriveTypeW
CreateTimerQueueTimer
DeleteTimerQueue
DeleteTimerQueueTimer
CreateTimerQueue
HeapFree
WriteFile
GetCurrentProcess
VirtualQuery
GetLogicalDriveStringsW
GetEnvironmentVariableW
HeapAlloc
WaitForMultipleObjects
GetCurrentProcessId
DeleteFileW
GetFileSize
Sleep
WaitForSingleObject
ReadFile
GetLastError
MoveFileExW
MapViewOfFile
GetCurrentThreadId
TerminateProcess
LoadLibraryExW
ResumeThread
GetFileTime
SetEndOfFile
SetFilePointer
SetFileTime
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
ExpandEnvironmentStringsW
ResetEvent
SetEvent
CreateEventW
lstrcmpiW
FindResourceW
LoadResource
GetSystemInfo
LockResource
GetVersionExW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetModuleFileNameW
OpenProcess
DisableThreadLibraryCalls
GetTickCount
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleHandleA
LoadLibraryA
QueryDosDeviceW
GetFileSizeEx
CreateFileW
FindNextFileW
FindClose
CreateDirectoryW
GetTempPathW
GetFileAttributesW
GetSystemDirectoryW
SetFileAttributesW
GetCurrentDirectoryW
GetWindowsDirectoryW
UnmapViewOfFile
OpenFileMappingW
TlsAlloc
TlsFree
GetTimeZoneInformation
CloseHandle
MoveFileW
InterlockedExchangeAdd
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocalTime
FormatMessageW
GlobalMemoryStatusEx
CreateFileMappingW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
RegOpenKeyW
OpenProcessToken
RegCloseKey
GetTokenInformation
LookupPrivilegeNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
QueryServiceStatusEx
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegQueryValueExW
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?classic@locale@std@@SAABV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
_Mtx_init_in_situ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
_Mtx_destroy_in_situ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_alloc@std@@YAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
GetDeviceDriverFileNameW
EnumDeviceDrivers
StrDupW
PathIsRootW
PathCanonicalizeW
PathIsRelativeW
PathUnquoteSpacesW
PathIsDirectoryW
PathMakePrettyW
StrCmpNIW
StrCmpIW
PathIsNetworkPathW
PathGetDriveNumberW
PathFindFileNameW
__CxxFrameHandler3
__std_type_info_name
wcsrchr
wcschr
memmove
memchr
__RTtypeid
wcsstr
__std_exception_copy
strstr
strchr
memcpy
__std_terminate
_except_handler4_common
_CxxThrowException
memset
__std_type_info_destroy_list
__std_type_info_compare
_purecall
__std_exception_destroy
__RTDynamicCast
_errno
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo
strerror_s
_beginthreadex
wcsncpy
isspace
toupper
_wcsnicmp
tolower
isalnum
towupper
towlower
_wcsicmp
wcscpy_s
strpbrk
_stricmp
_mktime64
_time64
_localtime64
free
malloc
calloc
realloc
_callnewh
_wfopen_s
fclose
fread
fseek
ftell
fwrite
__stdio_common_vsprintf_s
rewind
__stdio_common_vswprintf
__stdio_common_vsprintf
__stdio_common_vswscanf
rand
srand
_splitpath_s
_wtoi
atoi
wcstoul
floor
_finite
_except1
_isnan
_dtest
modf
ceil
SHGetFolderPathW
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ