Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1c3ec2a39e84a8db088f3062d5a2ffef0749b33399bcbee839c124de43966e3c.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
1c3ec2a39e84a8db088f3062d5a2ffef0749b33399bcbee839c124de43966e3c.exe
Resource
win10v2004-20230703-en
Target
1c3ec2a39e84a8db088f3062d5a2ffef0749b33399bcbee839c124de43966e3c
Size
786KB
MD5
bdb6c444dc625d3c2e3adc24989a065d
SHA1
5b0502cc935ae7d002ee686175defd37586bf538
SHA256
1c3ec2a39e84a8db088f3062d5a2ffef0749b33399bcbee839c124de43966e3c
SHA512
0fe9d47a2f7a89654b03ee8e6c12b5b222dec945860c8e31d5b3e58dab4019f5ec57ee2ec9b23bb68bef6836da492ec082566cd3a1bba653f8c7a107e713ce57
SSDEEP
6144:8pFjkMbVLd4PtFz9/WWmL7LIgbZKyZQUd3ueXCDQOtVOc/XsJZ0PyGjloz9O2Fn1:8s61Wj7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitCommonControlsEx
?Left@CTXStringW@@QBE?AV1@H@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
??0CHttpClient@@QAE@XZ
??1CHttpClient@@QAE@XZ
?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z
?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z
?GetDownloadedFilePath@CHttpClient@@QAEHAAVCTXStringW@@@Z
?CancelDownload@CHttpClient@@QAEXXZ
?EnableQQNetworkSettings@CHttpClient@@QAEHH@Z
?SetEventMask@CHttpClient@@QAEXK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
?Format@CTXStringA@@QAAXPBDZZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ
?LogTaskStart@Misc@Util@@YAKPB_W@Z
?LogTaskEnd@Misc@Util@@YAXK@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
??0CUnZipFile@@QAE@XZ
??1CUnZipFile@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
?MakeUpper@CTXStringW@@QAEAAV1@XZ
?Empty@CTXStringW@@QAEXXZ
?Right@CTXStringW@@QBE?AV1@H@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?Format@CTXStringW@@QAAXPB_WZZ
??4CTXStringW@@QAEAAV0@PA_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringA@@QBEPBDXZ
?Replace@CTXStringA@@QAEHPBD0@Z
?Insert@CTXStringA@@QAEHHPBD@Z
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@PBD@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@_WABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?GetString@CTXStringW@@QBEPB_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?Trim@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
?FindOneOf@CTXStringW@@QBEHPB_W@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
?SetDPIAdaptFlag@DPI@GF@Util@@YAXH@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
??_7MessageLoopForUI@AsyncTask@@6B@
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1Thread@AsyncTask@@UAE@XZ
??0Thread@AsyncTask@@QAE@PBD@Z
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
??1MessageLoop@AsyncTask@@UAE@XZ
??0MessageLoop@AsyncTask@@QAE@W4Type@01@@Z
?RegisterCallback@AtExitManager@AsyncTask@@SAXP6AXPAX@Z0@Z
??1AtExitManager@AsyncTask@@QAE@XZ
??0AtExitManager@AsyncTask@@QAE@XZ
?Unlock@LockImpl@AsyncTask@@QAEXXZ
?Lock@LockImpl@AsyncTask@@QAEXXZ
??1LockImpl@AsyncTask@@QAE@XZ
??0LockImpl@AsyncTask@@QAE@XZ
ord7
ord5
ord10
ord6
ord8
ord11
WaitForSingleObject
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
CopyFileW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetProcAddress
CreateMutexW
GetModuleHandleW
WritePrivateProfileStringW
GetSystemDirectoryW
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateDirectoryW
GetVolumeInformationW
LocalFree
GetLongPathNameW
FindClose
GetPrivateProfileIntW
GetTempPathW
RemoveDirectoryW
QueryPerformanceCounter
GetFileAttributesW
FindFirstFileW
FindNextFileW
IsBadReadPtr
TerminateProcess
FreeLibrary
IsDebuggerPresent
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
InitializeSListHead
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoW
GetCurrentProcessId
ResumeThread
GetCommandLineW
GetTickCount
SetFileAttributesW
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
PostMessageW
IsWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoW
GetPropW
GetDesktopWindow
GetWindow
PostQuitMessage
SetPropW
LoadIconW
IsIconic
ShowWindow
IsWindowVisible
SetActiveWindow
GetForegroundWindow
SendMessageTimeoutW
AllowSetForegroundWindow
SetForegroundWindow
RemovePropW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
GetUserNameW
RegSetValueExW
SetEntriesInAclW
SetNamedSecurityInfoW
BuildExplicitAccessWithNameW
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
OleUninitialize
CoTaskMemFree
OleInitialize
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysFreeString
PathGetArgsW
PathAppendW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveBackslashW
PathAddBackslashW
wnsprintfW
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
InternetOpenW
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
InternetConnectW
HttpOpenRequestW
InternetGetConnectedState
HttpSendRequestW
InternetCloseHandle
InternetCanonicalizeUrlW
InternetCrackUrlW
UuidCreateSequential
UuidToStringA
RpcStringFreeA
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
_purecall
memcpy
memmove
strchr
__CxxFrameHandler3
memcmp
_except_handler4_common
_callnewh
malloc
_set_new_mode
free
_recalloc
calloc
_controlfp_s
terminate
_beginthreadex
_errno
_register_thread_local_exe_atexit_callback
_c_exit
_invalid_parameter_noinfo_noreturn
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_invalid_parameter_noinfo
_seh_filter_exe
_set_app_type
_exit
_itoa_s
_wtol
_wtoi
atoi
isalpha
wcsncpy
isdigit
wcsncat
wcscmp
strncmp
strlen
wcslen
isspace
wcscpy_s
fclose
fread
_wfopen_s
_set_fmode
__p__commode
__stdio_common_vswprintf_s
_waccess
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE