Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
b6cdd2aa1fc9ba7d7e305fdd273dac06067409305bcd5388fb6459d7826e44c8.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b6cdd2aa1fc9ba7d7e305fdd273dac06067409305bcd5388fb6459d7826e44c8.exe
Resource
win10v2004-20230703-en
Target
b6cdd2aa1fc9ba7d7e305fdd273dac06067409305bcd5388fb6459d7826e44c8
Size
383KB
MD5
e800c7dd6a81b61c7204f08f197c48ce
SHA1
3ca6ea7b71bd8e1b0de5bce9e07c1de5db17ff83
SHA256
b6cdd2aa1fc9ba7d7e305fdd273dac06067409305bcd5388fb6459d7826e44c8
SHA512
ed77c8b8d4bf22547de01e4e9a69ca6475f2b05fcffcc9d005e48485e665d56b27e5dc8bf848cc025985ce04b20fdc03f0c35e5fa254046ecf6151333d270d66
SSDEEP
6144:XDr6O/XCwKVM6rJGSMPyGcROJ/08AGdGoGMG6G2GAGtEmELEuEeE3EMEuE5ENEKh:XKO/GME/O1yq0cC6g6v66666ES66666f
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0Thread@AsyncTask@@QAE@PBD@Z
?Run@Thread@AsyncTask@@MAEXPAVMessageLoop@2@@Z
?Stop@Thread@AsyncTask@@QAEXXZ
??1Thread@AsyncTask@@UAE@XZ
?Init@Thread@AsyncTask@@MAEXXZ
?CleanUp@Thread@AsyncTask@@MAEXXZ
?CleanUpAfterMessageLoopDestruction@Thread@AsyncTask@@MAEXXZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?SetWorkerFactory@MessageLoop@AsyncTask@@QAEXPAVWorkerFactory@12@@Z
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1MessageLoopForUI@AsyncTask@@UAE@XZ
??0MessageLoopForUI@AsyncTask@@QAE@XZ
?ThreadMain@Thread@AsyncTask@@EAEXXZ
?Quit@MessageLoop@AsyncTask@@QAEXXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??1CTXStringA@@QAE@XZ
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?Base64Decode@Encode@Util@@YA?AVCTXBuffer@@PB_W@Z
ord30
??0CTXBSTR@@QAE@XZ
?IsFileExist@FS@@YAHPB_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
ord22
?IsEmpty@CTXStringW@@QBE_NXZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@PB_WH@Z
?Empty@CTXStringW@@QAEXXZ
?AppendChar@CTXStringW@@QAEX_W@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?GetLength@CTXStringW@@QBEHXZ
??ACTXStringW@@QBE_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GetLength@CTXStringA@@QBEHXZ
?GetString@CTXStringA@@QBEPBDXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??BCTXStringA@@QBEPBDXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformModeConfig@Boot@Util@@YAHXZ
?InitNetwork@Network@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?TXLoadString@@YAPB_WPB_W0@Z
?Append@CTXStringW@@QAEXABV1@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z
??0CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??4CTXStringA@@QAEAAV0@PBD@Z
?FlushLog@TXLog@@YAXXZ
??M@YA_NABVCTXStringA@@0@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXBSTR@@QAE@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
??0CDPIScaleIgnoreHelper@@QAE@XZ
??1CDPIScaleIgnoreHelper@@QAE@XZ
?ScaleRECT@DPI@GF@Util@@YAXPAUtagRECT@@@Z
?GetDPIScale@DPI@GF@Util@@YAMXZ
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z
??0CDPIScaleIgnoreResetHelper@@QAE@XZ
??1CDPIScaleIgnoreResetHelper@@QAE@XZ
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?CreateCanvas@DPI@GF@Util@@YAPAUHGCANVAS__@@HHPAU4@@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?tim_rpc_alloc_context@@YAPAXXZ
?tim_rpc_set_target_window@@YAHPAXPAUHWND__@@@Z
?tim_rpc_set_timeout@@YAHPAXI@Z
?tim_rpc_get_invoke_error_code@@YAHPAXPAI@Z
?tim_rpc_get_server_error_code@@YAHPAXPAI@Z
?tim_rpc_set_method@@YAHPAXPBDI@Z
?tim_rpc_set_params@@YAHPAXPBDI@Z
?tim_rpc_invoke@@YAPAXPAXI@Z
?tim_rpc_get_result_data@@YAPBDPAXPAI@Z
?tim_rpc_free_invoke_result@@YAXPAX@Z
?tim_rpc_get_invoke_error_msg@@YAPBDPAX@Z
?tim_rpc_free_context@@YAXPAX@Z
DrawCircle
SetColor
SetSmooth
SetDrawStyle
SetCanvasFilter
GetTexture
CanvasToTexture
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
IsDebuggerPresent
OutputDebugStringW
ExpandEnvironmentStringsW
Sleep
CreateFileMappingW
CloseHandle
MapViewOfFile
UnmapViewOfFile
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetFullPathNameW
InterlockedExchange
CreateFileW
GetFileSizeEx
RaiseException
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeSListHead
CharNextW
FindWindowExW
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
CommandLineToArgvW
ShellExecuteExW
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
OleUninitialize
OleInitialize
CoCreateInstance
VarUI4FromStr
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
VariantChangeType
VariantClear
SysAllocString
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
PathIsDirectoryW
PathFileExistsW
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
CertGetNameStringW
memcpy
memmove
memcmp
_purecall
memset
wcsstr
_CxxThrowException
__std_exception_destroy
_except_handler4_common
__std_terminate
__CxxFrameHandler3
__std_exception_copy
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_c_exit
_invalid_parameter_noinfo_noreturn
_exit
_controlfp_s
_set_app_type
_initialize_onexit_table
_errno
_register_thread_local_exe_atexit_callback
_seh_filter_exe
exit
_invalid_parameter_noinfo
_cexit
terminate
_crt_atexit
_register_onexit_function
strlen
strcmp
wcsncpy_s
towlower
wcslen
free
malloc
_recalloc
_callnewh
_set_new_mode
_wtoi64
strtoull
_set_fmode
__p__commode
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__setusermatherr
_except1
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE