Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ed30f860137a50da511f34ea45318f612872070b17a754cb56734fd7f5280533.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ed30f860137a50da511f34ea45318f612872070b17a754cb56734fd7f5280533.dll
Resource
win10v2004-20230221-en
Target
ed30f860137a50da511f34ea45318f612872070b17a754cb56734fd7f5280533
Size
4.1MB
MD5
6ff3a738f6c13bbae1852940ce3db639
SHA1
af61b56bdeba5b573c6b71ebbc3cc22a43c417db
SHA256
ed30f860137a50da511f34ea45318f612872070b17a754cb56734fd7f5280533
SHA512
9e4f21b4ee7358b8048b0fdeca287de211f252212c06e770a1ff6f9d9d08cac08ee4e920af1244e8fadd4f56570666d569b70ab639a3cedf9e9a34be89e1ad68
SSDEEP
49152:knBk/utkNj+HL1mmlqoR4yvY+KP1GkadspEB1rvaP6PPqpfEFGgVTrYttsCc+D28:ktepOUmlqy4yvv6efr/qdEwUw
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
SetEvent
CloseHandle
GetPrivateProfileSectionW
MoveFileExW
CreateMutexW
OpenMutexW
GetCurrentProcessId
WriteFile
GetModuleFileNameW
SetFilePointer
CreateFileW
GetCurrentThreadId
GetLocalTime
QueryDosDeviceW
GetEnvironmentVariableW
GetLogicalDriveStringsW
VirtualQuery
GetUserDefaultLangID
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileSizeEx
lstrcpyW
lstrcatW
LoadLibraryA
GlobalMemoryStatusEx
SetLastError
InterlockedExchange
DeviceIoControl
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
QueryPerformanceFrequency
MoveFileW
GetTempFileNameW
CopyFileW
SetCurrentDirectoryW
GetWindowsDirectoryW
GetCurrentDirectoryW
DeleteFileW
SetFileAttributesW
GetSystemDirectoryW
GetFileAttributesW
GetTempPathW
RemoveDirectoryW
lstrlenW
GetFullPathNameW
CreateDirectoryW
FormatMessageW
FileTimeToDosDateTime
DosDateTimeToFileTime
GetSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetTickCount
SwitchToThread
FindClose
FindNextFileW
GetProcessHeap
HeapAlloc
GlobalFree
GlobalAlloc
GetComputerNameExW
WaitForSingleObject
ReleaseMutex
GetFileAttributesExW
GetShortPathNameW
GetLongPathNameW
FindFirstFileW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
OpenProcess
GetCurrentProcess
LoadLibraryExW
FreeLibrary
MultiByteToWideChar
GetACP
WideCharToMultiByte
lstrcmpiW
FindResourceW
LoadResource
GetSystemInfo
LockResource
GetVersionExW
ExpandEnvironmentStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
ResumeThread
LoadLibraryW
GetFileTime
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
GetExitCodeProcess
GetModuleHandleW
CreateProcessW
LocalFree
GetProcAddress
SearchPathW
GetDriveTypeW
InterlockedExchangeAdd
ResetEvent
Sleep
CreateEventW
GetVersionExA
DeleteFileA
InitializeSListHead
GetStdHandle
GetFileType
HeapReAlloc
FlushViewOfFile
HeapCompact
OutputDebugStringW
HeapDestroy
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
UnlockFile
AreFileApisANSI
CreateFileMappingA
HeapCreate
LockFileEx
FormatMessageA
InterlockedCompareExchange
FlushFileBuffers
OutputDebugStringA
LocalAlloc
OpenEventW
WaitForMultipleObjects
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemDefaultUILanguage
GetLastError
HeapSize
HeapValidate
WaitForSingleObjectEx
CreateFileA
IsDebuggerPresent
GetStartupInfoW
HeapFree
SetThreadExecutionState
GetProcessTimes
InterlockedDecrement
InterlockedIncrement
GetModuleHandleExW
LockFile
GetFullPathNameA
UnlockFileEx
GetSystemTimeAsFileTime
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xruntime_error@std@@YAXPBD@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?uncaught_exception@std@@YA_NXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
_Mbrtowc
?_Xbad_alloc@std@@YAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
??0_Locinfo@std@@QAE@HPBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
__std_type_info_name
__RTDynamicCast
memchr
__CxxFrameHandler3
memmove
strrchr
memcpy
__std_type_info_destroy_list
memset
_CxxThrowException
_purecall
strchr
strstr
__std_exception_copy
__std_exception_destroy
wcsstr
wcschr
wcsrchr
_except_handler4_common
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_beginthreadex
abort
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_crt_atexit
_endthreadex
raise
_exit
_initterm_e
_initterm
terminate
_cexit
_crt_at_quick_exit
_errno
_localtime64
_time64
_mktime64
clock
_localtime64_s
iswdigit
_wcsnicmp
isdigit
_stricmp
toupper
towupper
_wcsicmp
towlower
wcsncpy
strcspn
isspace
strncmp
strpbrk
isalnum
tolower
ftell
rewind
fseek
fclose
fwrite
fread
__stdio_common_vswprintf
__stdio_common_vsprintf
ungetc
__stdio_common_vsprintf_s
fputc
fflush
__stdio_common_vsscanf
fgetc
fgetpos
_wfopen_s
__stdio_common_vswscanf
_get_stream_buffer_pointers
_fseeki64
fsetpos
setvbuf
_wtoi
wcstoul
atoi
_callnewh
_msize
_recalloc
malloc
free
realloc
calloc
_lock_file
_splitpath_s
_unlock_file
rand
srand
qsort
_dtest
modf
_except1
FindWindowExW
IsWindowVisible
SetForegroundWindow
GetSystemMetrics
WindowFromPoint
IsWindow
CloseDesktop
ExitWindowsEx
wsprintfW
GetClassNameW
SwitchDesktop
GetDesktopWindow
OpenDesktopW
GetParent
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
UnregisterClassW
GetWindow
FindWindowW
ShowWindow
GetWindowLongW
SendMessageW
GetWindowThreadProcessId
FreeSid
RegisterEventSourceW
ReportEventW
GetTokenInformation
OpenProcessToken
AllocateAndInitializeSid
EqualSid
AdjustTokenPrivileges
LookupPrivilegeValueW
DeregisterEventSource
SHGetFolderPathW
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ