Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
83bbbb809e3e189753e2e6b58428289b1596402fad2332525a6fcc5cd2dea23d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
83bbbb809e3e189753e2e6b58428289b1596402fad2332525a6fcc5cd2dea23d.exe
Resource
win10v2004-20230703-en
Target
83bbbb809e3e189753e2e6b58428289b1596402fad2332525a6fcc5cd2dea23d
Size
772KB
MD5
45642584498fbee5658435b67a817eb9
SHA1
35f1ec390b0eb8183e00786c8058a907ddb30700
SHA256
83bbbb809e3e189753e2e6b58428289b1596402fad2332525a6fcc5cd2dea23d
SHA512
7f2982e7ef5a0f01b622987541949403fad9aa3c972dbfd51c3e7b391891d33d73a44c77c8cbc71584c9f5ad6fc9366a7064bb52e9fe3ae5a3d6d4d824b50fb4
SSDEEP
6144:7pFjkMbVLd4PtFz9/WWaiahY81vGWfKbImFtW03PkxBcXqurNw71meNv0dHlRwKv:7s61Wj7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitCommonControlsEx
?Left@CTXStringW@@QBE?AV1@H@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
??0CHttpClient@@QAE@XZ
??1CHttpClient@@QAE@XZ
?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z
?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z
?GetDownloadedFilePath@CHttpClient@@QAEHAAVCTXStringW@@@Z
?CancelDownload@CHttpClient@@QAEXXZ
?EnableQQNetworkSettings@CHttpClient@@QAEHH@Z
?SetEventMask@CHttpClient@@QAEXK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
?Format@CTXStringA@@QAAXPBDZZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ
?LogTaskStart@Misc@Util@@YAKPB_W@Z
?LogTaskEnd@Misc@Util@@YAXK@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
??0CUnZipFile@@QAE@XZ
??1CUnZipFile@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
?MakeUpper@CTXStringW@@QAEAAV1@XZ
?Empty@CTXStringW@@QAEXXZ
?Right@CTXStringW@@QBE?AV1@H@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?Format@CTXStringW@@QAAXPB_WZZ
??4CTXStringW@@QAEAAV0@PA_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringA@@QBEPBDXZ
?Replace@CTXStringA@@QAEHPBD0@Z
?Insert@CTXStringA@@QAEHHPBD@Z
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@PBD@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@_WABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?GetString@CTXStringW@@QBEPB_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?Trim@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
?FindOneOf@CTXStringW@@QBEHPB_W@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
?SetDPIAdaptFlag@DPI@GF@Util@@YAXH@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
??_7MessageLoopForUI@AsyncTask@@6B@
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1Thread@AsyncTask@@UAE@XZ
??0Thread@AsyncTask@@QAE@PBD@Z
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
??1MessageLoop@AsyncTask@@UAE@XZ
??0MessageLoop@AsyncTask@@QAE@W4Type@01@@Z
?RegisterCallback@AtExitManager@AsyncTask@@SAXP6AXPAX@Z0@Z
??1AtExitManager@AsyncTask@@QAE@XZ
??0AtExitManager@AsyncTask@@QAE@XZ
?Unlock@LockImpl@AsyncTask@@QAEXXZ
?Lock@LockImpl@AsyncTask@@QAEXXZ
??1LockImpl@AsyncTask@@QAE@XZ
??0LockImpl@AsyncTask@@QAE@XZ
ord7
ord5
ord10
ord6
ord8
ord11
WaitForSingleObject
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
CopyFileW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetProcAddress
CreateMutexW
GetModuleHandleW
WritePrivateProfileStringW
GetSystemDirectoryW
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateDirectoryW
GetVolumeInformationW
LocalFree
GetLongPathNameW
FindClose
GetPrivateProfileIntW
GetTempPathW
RemoveDirectoryW
QueryPerformanceCounter
GetFileAttributesW
FindFirstFileW
FindNextFileW
IsBadReadPtr
TerminateProcess
FreeLibrary
IsDebuggerPresent
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
InitializeSListHead
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoW
GetCurrentProcessId
ResumeThread
GetCommandLineW
GetTickCount
SetFileAttributesW
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
PostMessageW
IsWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoW
GetPropW
GetDesktopWindow
GetWindow
PostQuitMessage
SetPropW
LoadIconW
IsIconic
ShowWindow
IsWindowVisible
SetActiveWindow
GetForegroundWindow
SendMessageTimeoutW
AllowSetForegroundWindow
SetForegroundWindow
RemovePropW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
GetUserNameW
RegSetValueExW
SetEntriesInAclW
SetNamedSecurityInfoW
BuildExplicitAccessWithNameW
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
OleUninitialize
CoTaskMemFree
OleInitialize
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysFreeString
PathGetArgsW
PathAppendW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveBackslashW
PathAddBackslashW
wnsprintfW
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
InternetOpenW
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
InternetConnectW
HttpOpenRequestW
InternetGetConnectedState
HttpSendRequestW
InternetCloseHandle
InternetCanonicalizeUrlW
InternetCrackUrlW
UuidCreateSequential
UuidToStringA
RpcStringFreeA
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
_purecall
memcpy
memmove
strchr
__CxxFrameHandler3
memcmp
_except_handler4_common
_callnewh
malloc
_set_new_mode
free
_recalloc
calloc
_controlfp_s
terminate
_beginthreadex
_errno
_register_thread_local_exe_atexit_callback
_c_exit
_invalid_parameter_noinfo_noreturn
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_invalid_parameter_noinfo
_seh_filter_exe
_set_app_type
_exit
_itoa_s
_wtol
_wtoi
atoi
isalpha
wcsncpy
isdigit
wcsncat
wcscmp
strncmp
strlen
wcslen
isspace
wcscpy_s
fclose
fread
_wfopen_s
_set_fmode
__p__commode
__stdio_common_vswprintf_s
_waccess
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE