Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
9970766d224bbdc5ec63df03a28918a0ecea3f18c07ee5f28066a486e86111fd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9970766d224bbdc5ec63df03a28918a0ecea3f18c07ee5f28066a486e86111fd.exe
Resource
win10v2004-20230703-en
Target
9970766d224bbdc5ec63df03a28918a0ecea3f18c07ee5f28066a486e86111fd
Size
475KB
MD5
d2f7a58f2c4211dd486d06934b590ea8
SHA1
73c515617cf932dd032e0f035852f4391f9a826d
SHA256
9970766d224bbdc5ec63df03a28918a0ecea3f18c07ee5f28066a486e86111fd
SHA512
92a5aa313299858c17777ffdaf50ce4d6a774e2b22ed1c4b7ba37597bd129c5fb8eece18d6f613317aa7c18302e61c0278e17408b88d41d2b2370409768b6fd0
SSDEEP
12288:5KO/GME/O1yq0cC6g6v66666ES66666E6kD66666E66gD66666E664D666U66yH5:JQO1ydcC6g6v66666ES66666E6kD6663
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0Thread@AsyncTask@@QAE@PBD@Z
?Run@Thread@AsyncTask@@MAEXPAVMessageLoop@2@@Z
?Stop@Thread@AsyncTask@@QAEXXZ
??1Thread@AsyncTask@@UAE@XZ
?Init@Thread@AsyncTask@@MAEXXZ
?CleanUp@Thread@AsyncTask@@MAEXXZ
?CleanUpAfterMessageLoopDestruction@Thread@AsyncTask@@MAEXXZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?SetWorkerFactory@MessageLoop@AsyncTask@@QAEXPAVWorkerFactory@12@@Z
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1MessageLoopForUI@AsyncTask@@UAE@XZ
??0MessageLoopForUI@AsyncTask@@QAE@XZ
?ThreadMain@Thread@AsyncTask@@EAEXXZ
?Quit@MessageLoop@AsyncTask@@QAEXXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??1CTXStringA@@QAE@XZ
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?Base64Decode@Encode@Util@@YA?AVCTXBuffer@@PB_W@Z
ord30
??0CTXBSTR@@QAE@XZ
?IsFileExist@FS@@YAHPB_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
ord22
?IsEmpty@CTXStringW@@QBE_NXZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@PB_WH@Z
?Empty@CTXStringW@@QAEXXZ
?AppendChar@CTXStringW@@QAEX_W@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?GetLength@CTXStringW@@QBEHXZ
??ACTXStringW@@QBE_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GetLength@CTXStringA@@QBEHXZ
?GetString@CTXStringA@@QBEPBDXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??BCTXStringA@@QBEPBDXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformModeConfig@Boot@Util@@YAHXZ
?InitNetwork@Network@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?TXLoadString@@YAPB_WPB_W0@Z
?Append@CTXStringW@@QAEXABV1@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z
??0CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??4CTXStringA@@QAEAAV0@PBD@Z
?FlushLog@TXLog@@YAXXZ
??M@YA_NABVCTXStringA@@0@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXBSTR@@QAE@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
??0CDPIScaleIgnoreHelper@@QAE@XZ
??1CDPIScaleIgnoreHelper@@QAE@XZ
?ScaleRECT@DPI@GF@Util@@YAXPAUtagRECT@@@Z
?GetDPIScale@DPI@GF@Util@@YAMXZ
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z
??0CDPIScaleIgnoreResetHelper@@QAE@XZ
??1CDPIScaleIgnoreResetHelper@@QAE@XZ
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?CreateCanvas@DPI@GF@Util@@YAPAUHGCANVAS__@@HHPAU4@@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?tim_rpc_alloc_context@@YAPAXXZ
?tim_rpc_set_target_window@@YAHPAXPAUHWND__@@@Z
?tim_rpc_set_timeout@@YAHPAXI@Z
?tim_rpc_get_invoke_error_code@@YAHPAXPAI@Z
?tim_rpc_get_server_error_code@@YAHPAXPAI@Z
?tim_rpc_set_method@@YAHPAXPBDI@Z
?tim_rpc_set_params@@YAHPAXPBDI@Z
?tim_rpc_invoke@@YAPAXPAXI@Z
?tim_rpc_get_result_data@@YAPBDPAXPAI@Z
?tim_rpc_free_invoke_result@@YAXPAX@Z
?tim_rpc_get_invoke_error_msg@@YAPBDPAX@Z
?tim_rpc_free_context@@YAXPAX@Z
DrawCircle
SetColor
SetSmooth
SetDrawStyle
SetCanvasFilter
GetTexture
CanvasToTexture
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
IsDebuggerPresent
OutputDebugStringW
ExpandEnvironmentStringsW
Sleep
CreateFileMappingW
CloseHandle
MapViewOfFile
UnmapViewOfFile
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetFullPathNameW
InterlockedExchange
CreateFileW
GetFileSizeEx
RaiseException
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeSListHead
CharNextW
FindWindowExW
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
CommandLineToArgvW
ShellExecuteExW
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
OleUninitialize
OleInitialize
CoCreateInstance
VarUI4FromStr
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
VariantChangeType
VariantClear
SysAllocString
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
PathIsDirectoryW
PathFileExistsW
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
CertGetNameStringW
memcpy
memmove
memcmp
_purecall
memset
wcsstr
_CxxThrowException
__std_exception_destroy
_except_handler4_common
__std_terminate
__CxxFrameHandler3
__std_exception_copy
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_c_exit
_invalid_parameter_noinfo_noreturn
_exit
_controlfp_s
_set_app_type
_initialize_onexit_table
_errno
_register_thread_local_exe_atexit_callback
_seh_filter_exe
exit
_invalid_parameter_noinfo
_cexit
terminate
_crt_atexit
_register_onexit_function
strlen
strcmp
wcsncpy_s
towlower
wcslen
free
malloc
_recalloc
_callnewh
_set_new_mode
_wtoi64
strtoull
_set_fmode
__p__commode
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__setusermatherr
_except1
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE