Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f9ccb25deee3f5867dba520e48c904945b9e2001ac83f31c6c721fcbb42758a2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f9ccb25deee3f5867dba520e48c904945b9e2001ac83f31c6c721fcbb42758a2.exe
Resource
win10v2004-20230220-en
Target
f9ccb25deee3f5867dba520e48c904945b9e2001ac83f31c6c721fcbb42758a2
Size
5.3MB
MD5
ad216ca54c19caaf7627bafcc5e06e49
SHA1
babc55a606e1d1aadb6078ab82d1822c2b53bd17
SHA256
f9ccb25deee3f5867dba520e48c904945b9e2001ac83f31c6c721fcbb42758a2
SHA512
8e86bf81e90c5d0ff4f5c22dc46bd8e6362d2e7e759e6f2c8390c55aa21bfa9c46de299fc2bb7dc16a5cfc813943c083defcee7ffd7f94098babda182d72534c
SSDEEP
98304:XxGnZkhMhJSdHjE+ox20Hl+JPKBc5Fj7+sH6wonGl7Nriat8eQGJOt:uZufmg0F1cf+sHB9t8/sOt
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=913100006317722856,CN=Shanghai Oriental Webcasting Co. Ltd.,OU=技术管理中心,O=Shanghai Oriental Webcasting Co. Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GlobalLock
SetCurrentDirectoryW
InterlockedDecrement
InterlockedIncrement
FileTimeToSystemTime
FileTimeToLocalFileTime
FormatMessageW
GetSystemInfo
GetCurrentThreadId
GetTickCount
TerminateProcess
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GlobalFree
GlobalAlloc
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateProcessW
GetExitCodeProcess
RemoveDirectoryW
GlobalUnlock
GetModuleFileNameW
GetCurrentProcessId
MoveFileExW
CopyFileW
DeleteFileW
GetFileAttributesExW
GetFileAttributesW
SetFileAttributesW
GetTempPathW
ReadFile
WriteFile
SetConsoleMode
ReadConsoleInputA
lstrlenA
GetFileSizeEx
GetFileInformationByHandle
InterlockedCompareExchange
FlushConsoleInputBuffer
SystemTimeToFileTime
GetSystemTime
GetFileSize
CreateEventW
Sleep
CreateDirectoryW
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetExitCodeThread
TerminateThread
CreateThread
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
WaitForSingleObject
FindNextFileW
FindFirstFileW
lstrcpyW
FindClose
GetLongPathNameW
QueryDosDeviceW
GetWindowsDirectoryW
GetLogicalDriveStringsW
lstrcmpiW
OpenProcess
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
GetModuleHandleW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrlenW
GetVolumeInformationW
GetSystemDirectoryW
CreateMutexW
ReleaseMutex
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExW
SetPriorityClass
CreateFileW
OutputDebugStringA
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
CloseHandle
DeviceIoControl
GetLastError
GetCurrentProcess
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetACP
ExitProcess
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
SetFilePointerEx
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
RtlUnwind
GetVersionExA
GetLocalTime
GetFullPathNameW
FindResourceW
SizeofResource
LoadResource
LockResource
FreeResource
HeapCreate
FlushInstructionCache
OutputDebugStringW
InitializeSListHead
QueryPerformanceCounter
QueryPerformanceFrequency
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
FormatMessageA
GetFileAttributesExA
SleepEx
VerSetConditionMask
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
VerifyVersionInfoA
ExpandEnvironmentStringsA
WaitForMultipleObjects
GetFileType
GetStdHandle
PeekNamedPipe
MulDiv
SetFileTime
LocalFileTimeToFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
GlobalMemoryStatus
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
SetEndOfFile
GetCurrentDirectoryW
WinExec
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
FindWindowW
SystemParametersInfoW
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
IsWindow
SetWindowTextW
ShowWindow
SetWindowLongW
GetWindowLongW
SetForegroundWindow
GetDC
ReleaseDC
InflateRect
OffsetRect
DrawIconEx
GetIconInfo
CharUpperW
CharPrevExA
IntersectRect
LoadCursorW
DestroyCursor
SetCursor
SetRect
CopyRect
UnionRect
IsRectEmpty
EqualRect
PtInRect
SetFocus
GetFocus
CallWindowProcW
GetDlgItem
GetActiveWindow
GetClientRect
GetWindowRect
MapWindowPoints
GetParent
GetWindow
GetForegroundWindow
GetMonitorInfoW
TrackMouseEvent
PostQuitMessage
AnimateWindow
SetLayeredWindowAttributes
IsIconic
IsZoomed
GetCapture
SetCapture
ReleaseCapture
UpdateWindow
BeginPaint
EndPaint
InvalidateRect
GetCursorPos
CreateCaret
GetCaretBlinkTime
HideCaret
SetCaretPos
ScreenToClient
DestroyIcon
LoadBitmapW
CreateIconFromResource
LoadImageW
CharNextW
GetMessageW
TranslateMessage
ClientToScreen
EnableMenuItem
GetSysColor
GetSystemMetrics
IsWindowVisible
DrawTextW
SystemParametersInfoA
CharLowerBuffW
MapVirtualKeyA
UpdateLayeredWindow
IsMenu
IsWindowEnabled
CreatePopupMenu
DestroyMenu
GetMenuItemCount
AppendMenuW
TrackPopupMenu
GetMenuInfo
SetMenuInfo
GetMenuItemInfoW
SetMenuContextHelpId
MsgWaitForMultipleObjects
SetWindowPos
GetClassNameW
LoadStringW
GetKeyState
UnregisterClassW
KillTimer
SetTimer
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
PostMessageW
SendMessageW
PeekMessageW
DispatchMessageW
wsprintfW
MonitorFromWindow
RegisterEventSourceA
ReportEventA
CryptAcquireContextA
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashA
CryptEnumProvidersA
DeregisterEventSource
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RevertToSelf
ImpersonateLoggedOnUser
RegEnumKeyW
RegOpenKeyW
OpenProcessToken
GetTokenInformation
SetTokenInformation
InitializeSecurityDescriptor
RegCreateKeyW
RegSetValueW
EqualSid
GetLengthSid
InitializeAcl
GetAclInformation
AddAce
GetAce
AddAccessAllowedAce
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
SetFileSecurityW
GetFileSecurityW
LookupAccountNameW
CreateProcessAsUserW
DuplicateTokenEx
LookupAccountSidW
SetSecurityDescriptorDacl
SHCreateDirectoryExW
SHFileOperationW
ShellExecuteExW
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
OleLockRunning
CLSIDFromString
CLSIDFromProgID
CreateBindCtx
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize
CoCreateGuid
CryptMsgGetParam
CryptMsgClose
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CertOpenStore
CertCloseStore
EnumProcessModules
GetModuleFileNameExW
EnumProcesses
GetProcessImageFileNameW
StrToIntExW
PathFileExistsW
SHCreateStreamOnFileEx
CreateEnvironmentBlock
DestroyEnvironmentBlock
GdipGetImageEncodersSize
GdipDrawImageRectI
GdipGraphicsClear
GdipSaveImageToFile
GdipDrawImageI
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipBitmapUnlockBits
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetImageEncoders
ImmReleaseContext
ImmAssociateContext
ImmGetContext
ord211
ord22
ord26
ord60
ord46
ord217
ord143
ord27
ord41
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord50
getpeername
getsockname
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
shutdown
htonl
gethostbyname
getservbyname
socket
WSAGetLastError
getsockopt
htons
ntohs
setsockopt
WSAIoctl
WSAStartup
WSACleanup
getaddrinfo
freeaddrinfo
accept
listen
recvfrom
sendto
ioctlsocket
gethostname
connect
StretchBlt
SetBkMode
Rectangle
GetStockObject
CreateSolidBrush
CreateFontIndirectW
SetGraphicsMode
GetDeviceCaps
CreateBitmap
CreateRoundRectRgn
EnumFontsW
BitBlt
GetViewportOrgEx
GetCurrentObject
EnumFontFamiliesExW
GetCharABCWidthsW
GetFontData
GetGlyphOutlineW
GetOutlineTextMetricsW
GetFontUnicodeRanges
GetGlyphIndicesW
GetTextExtentPointI
AddFontMemResourceEx
RemoveFontMemResourceEx
SetTextColor
SetViewportOrgEx
GetTextMetricsW
GetObjectW
CreateDIBSection
SelectObject
SelectClipRgn
IntersectClipRect
GetRegionData
ExtCreateRegion
DeleteObject
DeleteDC
CreateCompatibleDC
GdiFlush
GetTextFaceW
ExtTextOutW
SetTextAlign
SetWorldTransform
SysAllocString
SysFreeString
SysAllocStringLen
VariantCopy
VariantClear
ScriptFreeCache
ScriptShape
ScriptItemize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ