Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
0082b338495ec74cf0a5d2ec76317349e3d749c4b869b947bd433c087e900377.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0082b338495ec74cf0a5d2ec76317349e3d749c4b869b947bd433c087e900377.exe
Resource
win10v2004-20230824-en
Target
0082b338495ec74cf0a5d2ec76317349e3d749c4b869b947bd433c087e900377
Size
576KB
MD5
7741ea30bb2c3d28fa4e33d0edd1b44f
SHA1
c55b66da309087ab9035aa4c98c3a690662cc3e9
SHA256
0082b338495ec74cf0a5d2ec76317349e3d749c4b869b947bd433c087e900377
SHA512
1e6254c35124833ab4f226ff7fece98b71b2b3fd9d842b0dbe947d26fcf8dd2d5b5088687a18f52895a7ee14b01bb79e7a617299f42064dc3501719a06da6e41
SSDEEP
12288:LKO/GME/O1yq0cC6g6v66666ES66666E6kD66666E66gD66666E664D666U66yH5:HQO1ydcC6g6v66666ES66666E6kD6663
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0Thread@AsyncTask@@QAE@PBD@Z
?Run@Thread@AsyncTask@@MAEXPAVMessageLoop@2@@Z
?Stop@Thread@AsyncTask@@QAEXXZ
??1Thread@AsyncTask@@UAE@XZ
?Init@Thread@AsyncTask@@MAEXXZ
?CleanUp@Thread@AsyncTask@@MAEXXZ
?CleanUpAfterMessageLoopDestruction@Thread@AsyncTask@@MAEXXZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?SetWorkerFactory@MessageLoop@AsyncTask@@QAEXPAVWorkerFactory@12@@Z
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1MessageLoopForUI@AsyncTask@@UAE@XZ
??0MessageLoopForUI@AsyncTask@@QAE@XZ
?ThreadMain@Thread@AsyncTask@@EAEXXZ
?Quit@MessageLoop@AsyncTask@@QAEXXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??1CTXStringA@@QAE@XZ
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?Base64Decode@Encode@Util@@YA?AVCTXBuffer@@PB_W@Z
ord30
??0CTXBSTR@@QAE@XZ
?IsFileExist@FS@@YAHPB_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
ord22
?IsEmpty@CTXStringW@@QBE_NXZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@PB_WH@Z
?Empty@CTXStringW@@QAEXXZ
?AppendChar@CTXStringW@@QAEX_W@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?GetLength@CTXStringW@@QBEHXZ
??ACTXStringW@@QBE_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GetLength@CTXStringA@@QBEHXZ
?GetString@CTXStringA@@QBEPBDXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??BCTXStringA@@QBEPBDXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformModeConfig@Boot@Util@@YAHXZ
?InitNetwork@Network@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?TXLoadString@@YAPB_WPB_W0@Z
?Append@CTXStringW@@QAEXABV1@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z
??0CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??4CTXStringA@@QAEAAV0@PBD@Z
?FlushLog@TXLog@@YAXXZ
??M@YA_NABVCTXStringA@@0@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXBSTR@@QAE@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
??0CDPIScaleIgnoreHelper@@QAE@XZ
??1CDPIScaleIgnoreHelper@@QAE@XZ
?ScaleRECT@DPI@GF@Util@@YAXPAUtagRECT@@@Z
?GetDPIScale@DPI@GF@Util@@YAMXZ
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z
??0CDPIScaleIgnoreResetHelper@@QAE@XZ
??1CDPIScaleIgnoreResetHelper@@QAE@XZ
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?CreateCanvas@DPI@GF@Util@@YAPAUHGCANVAS__@@HHPAU4@@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?tim_rpc_alloc_context@@YAPAXXZ
?tim_rpc_set_target_window@@YAHPAXPAUHWND__@@@Z
?tim_rpc_set_timeout@@YAHPAXI@Z
?tim_rpc_get_invoke_error_code@@YAHPAXPAI@Z
?tim_rpc_get_server_error_code@@YAHPAXPAI@Z
?tim_rpc_set_method@@YAHPAXPBDI@Z
?tim_rpc_set_params@@YAHPAXPBDI@Z
?tim_rpc_invoke@@YAPAXPAXI@Z
?tim_rpc_get_result_data@@YAPBDPAXPAI@Z
?tim_rpc_free_invoke_result@@YAXPAX@Z
?tim_rpc_get_invoke_error_msg@@YAPBDPAX@Z
?tim_rpc_free_context@@YAXPAX@Z
DrawCircle
SetColor
SetSmooth
SetDrawStyle
SetCanvasFilter
GetTexture
CanvasToTexture
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
IsDebuggerPresent
OutputDebugStringW
ExpandEnvironmentStringsW
Sleep
CreateFileMappingW
CloseHandle
MapViewOfFile
UnmapViewOfFile
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetFullPathNameW
InterlockedExchange
CreateFileW
GetFileSizeEx
RaiseException
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeSListHead
CharNextW
FindWindowExW
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
CommandLineToArgvW
ShellExecuteExW
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
OleUninitialize
OleInitialize
CoCreateInstance
VarUI4FromStr
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
VariantChangeType
VariantClear
SysAllocString
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
PathIsDirectoryW
PathFileExistsW
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
CertGetNameStringW
memcpy
memmove
memcmp
_purecall
memset
wcsstr
_CxxThrowException
__std_exception_destroy
_except_handler4_common
__std_terminate
__CxxFrameHandler3
__std_exception_copy
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_c_exit
_invalid_parameter_noinfo_noreturn
_exit
_controlfp_s
_set_app_type
_initialize_onexit_table
_errno
_register_thread_local_exe_atexit_callback
_seh_filter_exe
exit
_invalid_parameter_noinfo
_cexit
terminate
_crt_atexit
_register_onexit_function
strlen
strcmp
wcsncpy_s
towlower
wcslen
free
malloc
_recalloc
_callnewh
_set_new_mode
_wtoi64
strtoull
_set_fmode
__p__commode
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__setusermatherr
_except1
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE