Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
76cf9a45231b0d27cb7fa2d3c2064a8d263e43822c825d311a6f89f220513e45.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
76cf9a45231b0d27cb7fa2d3c2064a8d263e43822c825d311a6f89f220513e45.dll
Resource
win10v2004-20230703-en
Target
76cf9a45231b0d27cb7fa2d3c2064a8d263e43822c825d311a6f89f220513e45
Size
107KB
MD5
91ac2b9d7c93a8caf4d0aaf2ade477dd
SHA1
e7b1357cc255a57f21d7bd99686036f026bcc9f8
SHA256
76cf9a45231b0d27cb7fa2d3c2064a8d263e43822c825d311a6f89f220513e45
SHA512
bcc1fbc98366f54f5a4c057070fa20a43275cbd706e87dabf9c1be478af1a86bb9bafbb96ea062f8868b217f6abbe9e6ad28b10ff10628d24afefa3a1cbf5616
SSDEEP
3072:wfUkYltnAGoX1tQmkcoESa23MX91JW4qGw3yOxtsFCutebDAm:wlY3AGu23Mt2N4oscuEDAm
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
ord33
ord34
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?Format@CTXStringW@@QAAXPB_WZZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ
?LogTaskStart@Misc@Util@@YAKPB_W@Z
?LogTaskEnd@Misc@Util@@YAXK@Z
?TXLoadString@@YAPB_WPB_W0@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??0CTXBSTR@@QAE@PB_W@Z
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?GetString@CTXStringA@@QBEPBDXZ
?GetLength@CTXStringA@@QBEHXZ
??BCTXStringA@@QBEPBDXZ
??YCTXStringW@@QAEAAV0@_W@Z
?GetString@CTXStringW@@QBEPB_WXZ
?GetAt@CTXStringW@@QBE_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?IsEmpty@CTXStringW@@QBE_NXZ
?Find@CTXStringW@@QBEHPB_WH@Z
?IsTencentTrusted@Misc@Util@@YAHPB_W@Z
?GetLogicThreadLoop@Misc@Util@@YAPAVMessageLoop@AsyncTask@@XZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??ICTXBSTR@@QAEPAPA_WXZ
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@XZ
??BCTXStringW@@QBEPB_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXStringW@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXStringW@@QAE@XZ
??0CTXStringA@@QAE@PBD@Z
??1CTXStringW@@QAE@XZ
?GetDPIScale@DPI@GF@Util@@YAMXZ
?DataReport@DataReport2@Util@@YAXKKKPA_W0H@Z
?GetSelfUin@Contact@Util@@YAKXZ
??0COIDBSoloJobV@@IAE@QB_W0KW4ChannelType@OIDBSoloJob@@@Z
??1COIDBSoloJobV@@UAE@XZ
?innerRequest@COIDBSoloJobV@@IAEHKPAUITXData@@PAUIRequestSink@OIDBSoloJob@@@Z
?IsWin7OrGreater@OSVersion@@YAHXZ
?GetMajorVer@Version@@YAEXZ
?GetMinorVer@Version@@YAEXZ
?GetBuildVer@Version@@YAKXZ
?GetPubNo@Version@@YAKXZ
?Release@?$RefCountedThreadSafe@VCBaseRspDataV@OIDBSoloJob@@U?$RefCountedThreadPtrDestruct@VCBaseRspDataV@OIDBSoloJob@@@destruct@AsyncTask@@@AsyncTask@@QAEXXZ
?Release@?$RefCountedThreadSafe@VCOIDBSoloJobV@@U?$RefCountedThreadPtrDestruct@VCOIDBSoloJobV@@@destruct@AsyncTask@@@AsyncTask@@QAEXXZ
?RegisterExtension@API@AdvConfig@@YAHABU_GUID@@PAGIPAUIUnknown@@@Z
??1Lock@AsyncTask@@QAE@XZ
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?AssertAcquired@Lock@AsyncTask@@QBEXXZ
?Acquire@Lock@AsyncTask@@QAEXXZ
?Release@Lock@AsyncTask@@QAEXXZ
??0Lock@AsyncTask@@QAE@XZ
?Value@TiXmlNode@@QBEPBDXZ
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?GetText@TiXmlElement@@QBEPBDXZ
??0TiXmlDocument@@QAE@XZ
??1TiXmlDocument@@UAE@XZ
?LoadXML@TiXmlDocument@@QAE_NPADHW4TiXmlEncoding@@@Z
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
TerminateProcess
OutputDebugStringW
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
OpenEventW
CreateEventW
CloseHandle
EncodePointer
DecodePointer
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetProcAddress
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadResource
SizeofResource
lstrcmpiW
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
MultiByteToWideChar
GetThreadLocale
SetThreadLocale
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
InterlockedExchange
InterlockedCompareExchange
FindClose
CreateDirectoryW
FindFirstFileW
SetEvent
InitializeSListHead
CharNextW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
SHGetSpecialFolderPathW
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
LoadTypeLi
SysStringLen
SysFreeString
LoadRegTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
VarUI4FromStr
PathFileExistsW
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
memmove
_except_handler4_common
__std_exception_destroy
__std_exception_copy
__std_type_info_destroy_list
__CxxFrameHandler3
_CxxThrowException
_purecall
wcsstr
memcmp
memcpy
memset
_crt_atexit
_errno
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_cexit
_initterm_e
_initterm
_register_onexit_function
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
wcscpy_s
wcscat_s
wcsncpy_s
wcslen
free
_recalloc
malloc
_callnewh
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
strtoll
wcstol
atoi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ