Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
bb41511eea1d8a141e034b1b2d91b03c125f2a30f14ae8a9ccaa74d6e8756ff1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
bb41511eea1d8a141e034b1b2d91b03c125f2a30f14ae8a9ccaa74d6e8756ff1.exe
Resource
win10v2004-20230703-en
Target
bb41511eea1d8a141e034b1b2d91b03c125f2a30f14ae8a9ccaa74d6e8756ff1
Size
373KB
MD5
dc88c98a737fbcd7d0aef8e0756af928
SHA1
c139f0def70e562b211f42f288dcf38637b62d59
SHA256
bb41511eea1d8a141e034b1b2d91b03c125f2a30f14ae8a9ccaa74d6e8756ff1
SHA512
b496989e9d9694831ee1da9b94674c759e4edfa885d2ef64bb2e7d3579e79b639cd20f4f476a4c640b4954965a7011194660bbdc69a6789bab4cf474cd50be74
SSDEEP
3072:8oUJT1q8UKh81UAoYd7bIgc7EL1igbhe5ULODd/GxkqSr:L2b25d7bIgcYRBhlil9qSr
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0CTXStringW@@QAE@ABV0@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??9@YA_NABVCTXStringW@@_W@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?GetLength@CTXStringW@@QBEHXZ
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??ACTXStringW@@QBE_WH@Z
?Replace@CTXStringW@@QAEH_W0@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??BCTXStringW@@QBEPB_WXZ
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?TXLoadString@@YAPB_WPB_W0@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
??0CTXStringA@@QAE@XZ
??1CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXBSTR@@QAE@XZ
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??M@YA_NABVCTXStringW@@0@Z
?Format@CTXStringW@@QAAXPB_WZZ
?Find@CTXStringW@@QBEHPB_WH@Z
ord34
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?StartThread@CTXThreadModel@@QAEHXZ
??0CTXStringW@@QAE@PB_W@Z
??0CTXThreadModel@@IAE@XZ
??1CTXThreadModel@@MAE@XZ
??0CTXStringW@@QAE@PA_W@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@ABV0@@Z
?GetTickCount@CTXTime@@SA?AV1@XZ
?GetTime@CTXTime@@QBE_JXZ
ord26
?FlushLog@TXLog@@YAXXZ
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??0CTXCommPack@@QAE@XZ
??1CTXCommPack@@UAE@XZ
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?AddTLV@CTXCommPack@@QAEHKABVCTXBuffer@@W4TXCommPackDataType@@@Z
?GetRegulatedTime@Time@Util@@YA_NAAJ@Z
??4CTXStringW@@QAEAAV0@_W@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?AddFmtString@TXStringBundle@@YAXABVCFmtString@@@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
??0CTXStringW@@QAE@XZ
?WaitThread@CTXThreadModel@@QAEHK@Z
??1CTXStringW@@QAE@XZ
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
CloseHandle
GetModuleFileNameW
GetModuleHandleW
GetPrivateProfileIntW
GetPrivateProfileStringW
CreateFileW
GetFileAttributesW
DeleteFileW
GetVersionExW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetLastError
Sleep
WriteFile
FindClose
GetSystemTimeAsFileTime
GetTickCount
WritePrivateProfileStringW
RemoveDirectoryW
FindFirstFileW
FindNextFileW
CopyFileW
MoveFileExW
QueryPerformanceCounter
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateMutexW
OpenMutexW
GetCurrentProcessId
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringW
IsDebuggerPresent
InitializeSListHead
DispatchMessageW
PostMessageW
TranslateMessage
GetMessageW
PostThreadMessageW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ShellExecuteW
OleInitialize
CoCreateInstance
CoReleaseServerProcess
CoAddRefServerProcess
OleUninitialize
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
StrCmpIW
StrCmpW
?_Xlength_error@std@@YAXPBD@Z
memcmp
_CxxThrowException
_except_handler4_common
__std_exception_copy
__std_exception_destroy
__std_terminate
memset
__CxxFrameHandler3
_purecall
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_configure_wide_argv
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_invalid_parameter_noinfo_noreturn
_c_exit
_register_thread_local_exe_atexit_callback
__p___wargv
__p___argc
_controlfp_s
_initialize_wide_environment
terminate
wcslen
malloc
_set_new_mode
free
_callnewh
__setusermatherr
__p__commode
_set_fmode
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE