Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
9bac4f789e11700db4b02dbc518522d42a8c40d42472429baec0be87499d475c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9bac4f789e11700db4b02dbc518522d42a8c40d42472429baec0be87499d475c.exe
Resource
win10v2004-20230703-en
Target
9bac4f789e11700db4b02dbc518522d42a8c40d42472429baec0be87499d475c
Size
281KB
MD5
017b34253dc60594fb971a0c6a1b80d0
SHA1
de8d783bc0dc2a9d1f594f60e783c57487b4aee2
SHA256
9bac4f789e11700db4b02dbc518522d42a8c40d42472429baec0be87499d475c
SHA512
ae35ec97a4fc233e92f4a81190467b82677a3f1d2060d143fb851491099224cf48cda28df276c474179201209942a600030f9a618147a8e97410ff4c0cc7fcfc
SSDEEP
1536:LNqljzx7ToqBan7GnKguZP/ytSJXpjCLooYkHy0X6+DjvPx+8i2:La7T+1qEXpjCLHYkS0X6SDx8
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?IsTencentTrusted@Misc@Util@@YAHPB_W@Z
?Find@CTXStringW@@QBEH_WH@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
DetourFunctionWrapper
DetourRemoveWrapper
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?GetSession@TXLog@@YAKXZ
?GetLCID@NLS@@YAKXZ
?SetBugReportFlag@TXBugReport@@YAHK@Z
?SetBugReportUin@TXBugReport@@YAXKH@Z
?ValidateBugReport@TXBugReport@@YAXXZ
??0CTXSpinLock@Util@@QAE@XZ
?Lock@CTXSpinLock@Util@@QAEXXZ
?AddExtraMem@TXBugReport@@YAHKI@Z
SaveCallStack
?UnLock@CTXSpinLock@Util@@QAEXXZ
??0CTXAutoSpinLock@Util@@QAE@AAVCTXSpinLock@1@@Z
??1CTXAutoSpinLock@Util@@QAE@XZ
?GetString@CTXStringW@@QBEPB_WXZ
GetCallStack
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
?Format@CTXStringW@@QAAXPB_WZZ
?GetLength@CTXStringW@@QBEHXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
??ACTXStringW@@QBE_WH@Z
??0CTXStringW@@QAE@PB_W@Z
?Append@CTXStringW@@QAEXPB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
??1CTXStringW@@QAE@XZ
??YCTXStringW@@QAEAAV0@PB_W@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?IsVista@Sys@Util@@YAHXZ
?IsEmpty@CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@PB_WH@Z
?FlushLog@TXLog@@YAXXZ
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@XZ
?Mid@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?ClearDeadQueue@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??8@YA_NPB_WABVCTXStringW@@@Z
?MinimzeMemory@Sys@Util@@YAXXZ
?GetConnectCount@CTXOPChannel@@QAEIXZ
?SendReply@CTXOPChannel@@QAEHKKPBEI@Z
??0CTXOPChannel@@QAE@XZ
?AddSink@CTXOPChannel@@QAEXPAUITXOPChanelSysSink@@@Z
??1CTXOPChannel@@UAE@XZ
?Start@CTXOPChannel@@QAEHPB_W@Z
?Listen@CTXOPChannel@@QAEHXZ
?Run@CTXOPChannel@@EAEIXZ
InternetErrorDlg
??1Lock@AsyncTask@@QAE@XZ
??0Lock@AsyncTask@@QAE@XZ
?RegisterCallback@AtExitManager@AsyncTask@@SAXP6AXPAX@Z0@Z
?Release@Lock@AsyncTask@@QAEXXZ
?Acquire@Lock@AsyncTask@@QAEXXZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1MessageLoopForUI@AsyncTask@@UAE@XZ
??0MessageLoopForUI@AsyncTask@@QAE@XZ
??1AtExitManager@AsyncTask@@QAE@XZ
??0AtExitManager@AsyncTask@@QAE@XZ
??1Thread@AsyncTask@@UAE@XZ
??0Thread@AsyncTask@@QAE@PBD@Z
GetModuleFileNameExW
UnhandledExceptionFilter
GetCurrentThreadId
GetModuleHandleExW
GetModuleHandleW
GetLastError
GetProcAddress
OpenProcess
CloseHandle
GetCurrentProcessId
GetCommandLineW
SetErrorMode
GetTickCount
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleFileNameW
GetSystemDirectoryW
GetWindowsDirectoryW
OpenMutexW
CreateMutexW
GetTempPathW
CreateDirectoryW
CreateFileW
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetLastError
DebugBreak
TlsGetValue
HeapAlloc
GetProcessHeap
TlsSetValue
InterlockedExchange
TlsAlloc
FreeLibrary
WriteProcessMemory
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetThreadPriority
ResumeThread
Sleep
CreateThread
WideCharToMultiByte
DeviceIoControl
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
OutputDebugStringW
lstrlenW
KillTimer
PostQuitMessage
SetTimer
RegQueryValueExW
RegCloseKey
GetUserNameW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
ShellExecuteW
CoCreateInstance
CLSIDFromProgID
CoInitialize
OleUninitialize
OleInitialize
CoUninitialize
PathFileExistsW
?_Xlength_error@std@@YAXPBD@Z
closesocket
getaddrinfo
WSAStartup
WSACleanup
setsockopt
socket
ntohs
inet_ntoa
recvfrom
htonl
htons
inet_addr
WSAGetLastError
sendto
GetAdaptersInfo
GetAdaptersAddresses
GetIpForwardTable
Netbios
__std_exception_destroy
_CxxThrowException
_except_handler4_common
wcsstr
_purecall
memmove
memcpy
memset
wcsrchr
memcmp
memchr
__std_exception_copy
__CxxFrameHandler3
_controlfp_s
terminate
__p___argc
__p___wargv
_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_register_onexit_function
_crt_atexit
_cexit
_get_wide_winmain_command_line
_seh_filter_exe
_set_app_type
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
wcslen
wcsncpy_s
isalnum
_stricmp
tolower
strlen
strncpy_s
wcscmp
wcscat_s
wcscpy_s
free
malloc
_callnewh
_set_new_mode
srand
rand
__stdio_common_vsnprintf_s
__p__commode
__acrt_iob_func
_set_fmode
__stdio_common_vfprintf
_time64
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE