Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1696d5c073205131e906c2291b2d5a395baf9a6bdd6dcee6e0b87332cf252526.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1696d5c073205131e906c2291b2d5a395baf9a6bdd6dcee6e0b87332cf252526.exe
Resource
win10v2004-20230703-en
Target
1696d5c073205131e906c2291b2d5a395baf9a6bdd6dcee6e0b87332cf252526
Size
862KB
MD5
9c697338071919a6b4acbb05ad744bd2
SHA1
6632c9f367271886092e770b067af37276d5a6a0
SHA256
1696d5c073205131e906c2291b2d5a395baf9a6bdd6dcee6e0b87332cf252526
SHA512
591656a251e330a866f5a85e65975b01c679743f7039ca0de8a8f96ec57259a40a1409e24780bbfeb6f1d77f366f83a259401ea5cfacc5bafc8c266c6c4ebeef
SSDEEP
24576:zQO1ydcC6g6v66666ES66666E6kD66666E66gD66666E664D666U66yH6q66HW6V:zQXcC6g6v66666ES66666E6kD66666Eh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0Thread@AsyncTask@@QAE@PBD@Z
?Run@Thread@AsyncTask@@MAEXPAVMessageLoop@2@@Z
?Stop@Thread@AsyncTask@@QAEXXZ
??1Thread@AsyncTask@@UAE@XZ
?Init@Thread@AsyncTask@@MAEXXZ
?CleanUp@Thread@AsyncTask@@MAEXXZ
?CleanUpAfterMessageLoopDestruction@Thread@AsyncTask@@MAEXXZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?SetWorkerFactory@MessageLoop@AsyncTask@@QAEXPAVWorkerFactory@12@@Z
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1MessageLoopForUI@AsyncTask@@UAE@XZ
??0MessageLoopForUI@AsyncTask@@QAE@XZ
?ThreadMain@Thread@AsyncTask@@EAEXXZ
?Quit@MessageLoop@AsyncTask@@QAEXXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??1CTXStringA@@QAE@XZ
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?Base64Decode@Encode@Util@@YA?AVCTXBuffer@@PB_W@Z
ord30
??0CTXBSTR@@QAE@XZ
?IsFileExist@FS@@YAHPB_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
ord22
?IsEmpty@CTXStringW@@QBE_NXZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@PB_WH@Z
?Empty@CTXStringW@@QAEXXZ
?AppendChar@CTXStringW@@QAEX_W@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?GetLength@CTXStringW@@QBEHXZ
??ACTXStringW@@QBE_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GetLength@CTXStringA@@QBEHXZ
?GetString@CTXStringA@@QBEPBDXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??BCTXStringA@@QBEPBDXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformModeConfig@Boot@Util@@YAHXZ
?InitNetwork@Network@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?TXLoadString@@YAPB_WPB_W0@Z
?Append@CTXStringW@@QAEXABV1@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z
??0CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??4CTXStringA@@QAEAAV0@PBD@Z
?FlushLog@TXLog@@YAXXZ
??M@YA_NABVCTXStringA@@0@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXBSTR@@QAE@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
??0CDPIScaleIgnoreHelper@@QAE@XZ
??1CDPIScaleIgnoreHelper@@QAE@XZ
?ScaleRECT@DPI@GF@Util@@YAXPAUtagRECT@@@Z
?GetDPIScale@DPI@GF@Util@@YAMXZ
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z
??0CDPIScaleIgnoreResetHelper@@QAE@XZ
??1CDPIScaleIgnoreResetHelper@@QAE@XZ
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?CreateCanvas@DPI@GF@Util@@YAPAUHGCANVAS__@@HHPAU4@@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?tim_rpc_alloc_context@@YAPAXXZ
?tim_rpc_set_target_window@@YAHPAXPAUHWND__@@@Z
?tim_rpc_set_timeout@@YAHPAXI@Z
?tim_rpc_get_invoke_error_code@@YAHPAXPAI@Z
?tim_rpc_get_server_error_code@@YAHPAXPAI@Z
?tim_rpc_set_method@@YAHPAXPBDI@Z
?tim_rpc_set_params@@YAHPAXPBDI@Z
?tim_rpc_invoke@@YAPAXPAXI@Z
?tim_rpc_get_result_data@@YAPBDPAXPAI@Z
?tim_rpc_free_invoke_result@@YAXPAX@Z
?tim_rpc_get_invoke_error_msg@@YAPBDPAX@Z
?tim_rpc_free_context@@YAXPAX@Z
DrawCircle
SetColor
SetSmooth
SetDrawStyle
SetCanvasFilter
GetTexture
CanvasToTexture
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
IsDebuggerPresent
OutputDebugStringW
ExpandEnvironmentStringsW
Sleep
CreateFileMappingW
CloseHandle
MapViewOfFile
UnmapViewOfFile
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetFullPathNameW
InterlockedExchange
CreateFileW
GetFileSizeEx
RaiseException
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeSListHead
CharNextW
FindWindowExW
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
CommandLineToArgvW
ShellExecuteExW
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
OleUninitialize
OleInitialize
CoCreateInstance
VarUI4FromStr
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
VariantChangeType
VariantClear
SysAllocString
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
PathIsDirectoryW
PathFileExistsW
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
CertGetNameStringW
memcpy
memmove
memcmp
_purecall
memset
wcsstr
_CxxThrowException
__std_exception_destroy
_except_handler4_common
__std_terminate
__CxxFrameHandler3
__std_exception_copy
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_c_exit
_invalid_parameter_noinfo_noreturn
_exit
_controlfp_s
_set_app_type
_initialize_onexit_table
_errno
_register_thread_local_exe_atexit_callback
_seh_filter_exe
exit
_invalid_parameter_noinfo
_cexit
terminate
_crt_atexit
_register_onexit_function
strlen
strcmp
wcsncpy_s
towlower
wcslen
free
malloc
_recalloc
_callnewh
_set_new_mode
_wtoi64
strtoull
_set_fmode
__p__commode
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__setusermatherr
_except1
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE