Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
a2f544cf5eb34beddd0ceae77ffe1a22be208917f57987ceea4f1ac1f7834ac6.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
a2f544cf5eb34beddd0ceae77ffe1a22be208917f57987ceea4f1ac1f7834ac6.exe
Resource
win10v2004-20230703-en
Target
a2f544cf5eb34beddd0ceae77ffe1a22be208917f57987ceea4f1ac1f7834ac6
Size
474KB
MD5
d411c2cc389bdc750c8f8c240584956f
SHA1
ad7a91f8909038cc32a4d253109f2e360d9e95fb
SHA256
a2f544cf5eb34beddd0ceae77ffe1a22be208917f57987ceea4f1ac1f7834ac6
SHA512
b4a5264bbf90fca07925b62b5ab4f70da7df17cbe321fb90714f2ac6397d3835c03a5f1c5296759e3c006c14ade8f800e6a5bfab942acb6a90ed523d4f48587d
SSDEEP
6144:RpFjkMbVLd4PtFz9/WWaiahY81vGWfKbImFtW03PkxBcXqurNw71:Rs61Wj7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitCommonControlsEx
?Left@CTXStringW@@QBE?AV1@H@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
??0CHttpClient@@QAE@XZ
??1CHttpClient@@QAE@XZ
?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z
?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z
?GetDownloadedFilePath@CHttpClient@@QAEHAAVCTXStringW@@@Z
?CancelDownload@CHttpClient@@QAEXXZ
?EnableQQNetworkSettings@CHttpClient@@QAEHH@Z
?SetEventMask@CHttpClient@@QAEXK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
?Format@CTXStringA@@QAAXPBDZZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ
?LogTaskStart@Misc@Util@@YAKPB_W@Z
?LogTaskEnd@Misc@Util@@YAXK@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
??0CUnZipFile@@QAE@XZ
??1CUnZipFile@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
?MakeUpper@CTXStringW@@QAEAAV1@XZ
?Empty@CTXStringW@@QAEXXZ
?Right@CTXStringW@@QBE?AV1@H@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?Format@CTXStringW@@QAAXPB_WZZ
??4CTXStringW@@QAEAAV0@PA_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringA@@QBEPBDXZ
?Replace@CTXStringA@@QAEHPBD0@Z
?Insert@CTXStringA@@QAEHHPBD@Z
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@PBD@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@_WABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?GetString@CTXStringW@@QBEPB_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?Trim@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
?FindOneOf@CTXStringW@@QBEHPB_W@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
?SetDPIAdaptFlag@DPI@GF@Util@@YAXH@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
??_7MessageLoopForUI@AsyncTask@@6B@
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1Thread@AsyncTask@@UAE@XZ
??0Thread@AsyncTask@@QAE@PBD@Z
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
??1MessageLoop@AsyncTask@@UAE@XZ
??0MessageLoop@AsyncTask@@QAE@W4Type@01@@Z
?RegisterCallback@AtExitManager@AsyncTask@@SAXP6AXPAX@Z0@Z
??1AtExitManager@AsyncTask@@QAE@XZ
??0AtExitManager@AsyncTask@@QAE@XZ
?Unlock@LockImpl@AsyncTask@@QAEXXZ
?Lock@LockImpl@AsyncTask@@QAEXXZ
??1LockImpl@AsyncTask@@QAE@XZ
??0LockImpl@AsyncTask@@QAE@XZ
ord7
ord5
ord10
ord6
ord8
ord11
WaitForSingleObject
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
CopyFileW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetProcAddress
CreateMutexW
GetModuleHandleW
WritePrivateProfileStringW
GetSystemDirectoryW
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateDirectoryW
GetVolumeInformationW
LocalFree
GetLongPathNameW
FindClose
GetPrivateProfileIntW
GetTempPathW
RemoveDirectoryW
QueryPerformanceCounter
GetFileAttributesW
FindFirstFileW
FindNextFileW
IsBadReadPtr
TerminateProcess
FreeLibrary
IsDebuggerPresent
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
InitializeSListHead
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoW
GetCurrentProcessId
ResumeThread
GetCommandLineW
GetTickCount
SetFileAttributesW
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
PostMessageW
IsWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoW
GetPropW
GetDesktopWindow
GetWindow
PostQuitMessage
SetPropW
LoadIconW
IsIconic
ShowWindow
IsWindowVisible
SetActiveWindow
GetForegroundWindow
SendMessageTimeoutW
AllowSetForegroundWindow
SetForegroundWindow
RemovePropW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
GetUserNameW
RegSetValueExW
SetEntriesInAclW
SetNamedSecurityInfoW
BuildExplicitAccessWithNameW
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
OleUninitialize
CoTaskMemFree
OleInitialize
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysFreeString
PathGetArgsW
PathAppendW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveBackslashW
PathAddBackslashW
wnsprintfW
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
InternetOpenW
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
InternetConnectW
HttpOpenRequestW
InternetGetConnectedState
HttpSendRequestW
InternetCloseHandle
InternetCanonicalizeUrlW
InternetCrackUrlW
UuidCreateSequential
UuidToStringA
RpcStringFreeA
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
_purecall
memcpy
memmove
strchr
__CxxFrameHandler3
memcmp
_except_handler4_common
_callnewh
malloc
_set_new_mode
free
_recalloc
calloc
_controlfp_s
terminate
_beginthreadex
_errno
_register_thread_local_exe_atexit_callback
_c_exit
_invalid_parameter_noinfo_noreturn
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_invalid_parameter_noinfo
_seh_filter_exe
_set_app_type
_exit
_itoa_s
_wtol
_wtoi
atoi
isalpha
wcsncpy
isdigit
wcsncat
wcscmp
strncmp
strlen
wcslen
isspace
wcscpy_s
fclose
fread
_wfopen_s
_set_fmode
__p__commode
__stdio_common_vswprintf_s
_waccess
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE