Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5e37dc1868e53a0843fa88508041c03eb865256b9fceb4811d6e9cbac169fee5.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5e37dc1868e53a0843fa88508041c03eb865256b9fceb4811d6e9cbac169fee5.dll
Resource
win10v2004-20230220-en
Target
5e37dc1868e53a0843fa88508041c03eb865256b9fceb4811d6e9cbac169fee5
Size
5.4MB
MD5
a78c4fafacc6308ad84ac354260a6fed
SHA1
355266844793e5f3b351a395ab455c236da6e41c
SHA256
5e37dc1868e53a0843fa88508041c03eb865256b9fceb4811d6e9cbac169fee5
SHA512
81f5baff0b87b464d7d6158b309964d00bcf82a8c123de5f2e71c8d90db3ce4b23d994dd9e281587ebccefa1ba3d739926e9b4f6ac814e109fc2c12a482d435f
SSDEEP
49152:kbsoRZRjxTTiiteR6ctTx5PYRmN1C69G1WfNqx3jS1h5E5VYr8eW6tJH2TDGZo0F:MbVhctTX669GRch5Ecr8eW6tx5BJZ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcessImageFileNameW
PathIsRootW
PathRemoveFileSpecW
PathIsNetworkPathW
PathFileExistsW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
CertAddSerializedElementToStore
CertGetCertificateContextProperty
CertFreeCertificateContext
GetLongPathNameW
GetSystemDirectoryW
GetPrivateProfileStringW
FileTimeToSystemTime
GetTickCount
GetDriveTypeW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileSectionW
GetCurrentProcess
IsWow64Process
lstrcmpW
WaitForMultipleObjects
HeapFree
InterlockedDecrement
GetModuleFileNameW
GetProcAddress
GetProcessHeap
GetModuleHandleW
InterlockedIncrement
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
CloseHandle
GetLocalTime
OpenProcess
SetFileAttributesW
HeapAlloc
FreeLibrary
InitializeCriticalSectionAndSpinCount
QueryDosDeviceW
GetLogicalDriveStringsW
VirtualQuery
GetUserDefaultLangID
GetModuleHandleExW
CreateMutexW
WaitForSingleObject
ReleaseMutex
ReadFile
TryEnterCriticalSection
lstrcmpiW
FindResourceW
LoadResource
GetSystemInfo
LockResource
GetWindowsDirectoryW
GetLastError
GetFileAttributesW
FindClose
GetEnvironmentVariableW
FindNextFileW
GetFullPathNameW
FindFirstFileW
Sleep
DeleteFileW
GetVolumePathNameW
GetDiskFreeSpaceW
LoadLibraryW
GlobalFree
GlobalAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetShortPathNameW
GetFileAttributesExW
LocalFree
GetVersionExW
SearchPathW
TerminateProcess
ExpandEnvironmentStringsW
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetFileTime
SetEndOfFile
GetFileSize
GetFileTime
CreateDirectoryW
RemoveDirectoryW
GetTempPathW
GetCurrentDirectoryW
SetCurrentDirectoryW
MoveFileExW
CopyFileW
GetTempFileNameW
MoveFileW
GetFileSizeEx
FormatMessageW
DeviceIoControl
InterlockedExchange
SetLastError
GlobalMemoryStatusEx
RaiseException
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
AreFileApisANSI
HeapCreate
InterlockedCompareExchange
OutputDebugStringA
LockFile
GetFullPathNameA
UnlockFileEx
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
GetVersionExA
GetComputerNameExW
DeleteFileA
HeapReAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
FormatMessageA
FlushFileBuffers
GetStdHandle
GetFileType
LoadLibraryA
OpenMutexW
MapViewOfFile
CreateFileMappingW
GetACP
MultiByteToWideChar
WideCharToMultiByte
UnmapViewOfFile
OpenFileMappingW
LoadLibraryExW
ResumeThread
GetExitCodeProcess
CreateProcessW
lstrcpyW
lstrcatW
lstrlenW
ResetEvent
SetEvent
CreateEventW
OpenEventW
GetVolumeInformationW
InterlockedExchangeAdd
FileTimeToDosDateTime
DosDateTimeToFileTime
GetSystemTime
SystemTimeToFileTime
OpenClipboard
CloseClipboard
GetPriorityClipboardFormat
wsprintfW
MessageBoxW
EmptyClipboard
GetUserObjectInformationW
GetProcessWindowStation
UnregisterClassW
CloseEventLog
RegisterEventSourceW
DeregisterEventSource
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
SetEntriesInAclW
LookupPrivilegeNameW
SetNamedSecurityInfoW
OpenProcessToken
FreeSid
GetTokenInformation
GetNumberOfEventLogRecords
ClearEventLogW
ReportEventW
RegSetValueExW
OpenEventLogW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
IsValidSid
ConvertSidToStringSidW
GetUserNameW
LookupAccountNameW
SHGetFolderPathW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHEmptyRecycleBinW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
CoTaskMemFree
CLSIDFromString
CoCreateInstance
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
??Bios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??0_Locinfo@std@@QAE@HPBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?global@locale@std@@SA?AV12@ABV12@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_Xruntime_error@std@@YAXPBD@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Xout_of_range@std@@YAXPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
??1_Facet_base@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??0_Facet_base@std@@QAE@XZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?c_str@?$_Yarn@D@std@@QBEPBDXZ
_Wcsxfrm
??_7facet@locale@std@@6B@
?id@?$collate@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Wcscoll
??_7_Facet_base@std@@6B@
_Mbrtowc
?_Xlength_error@std@@YAXPBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
strchr
wcsstr
wcschr
__std_exception_copy
__std_exception_destroy
_purecall
__std_type_info_name
wcsrchr
strstr
_except_handler4_common
__RTDynamicCast
memchr
__std_type_info_destroy_list
_CxxThrowException
memset
strrchr
memcpy
memmove
__CxxFrameHandler3
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
_errno
_execute_onexit_table
_initterm_e
_endthreadex
_exit
abort
_invalid_parameter_noinfo_noreturn
_crt_atexit
_initterm
_beginthreadex
_crt_at_quick_exit
raise
terminate
_cexit
_invalid_parameter_noinfo
calloc
_callnewh
_recalloc
_msize
realloc
malloc
free
_localtime64
_localtime64_s
_mktime64
_time64
fclose
ungetc
setvbuf
fgetpos
ftell
__stdio_common_vsprintf_s
fgetc
fflush
fputc
_fseeki64
_wfopen
fread
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vswscanf
fwrite
rewind
_wfopen_s
__stdio_common_vsscanf
fseek
_get_stream_buffer_pointers
fopen
fsetpos
atol
wcstof
wcstoul
_wcstoui64
_wtoi
wcstol
atoi
_wcstol_l
isdigit
strcspn
isalnum
isalpha
strncmp
towupper
wcsncpy
_wcsnicmp
_wcsicmp
_stricmp
strpbrk
toupper
tolower
towlower
rand
qsort
srand
_lock_file
_splitpath_s
_unlock_file
modf
_except1
ceil
_dtest
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ