Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
6a51c4537ce7705d5f5b65479334eb8bf4114a04836f5ce8d7d000f9bb576782.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6a51c4537ce7705d5f5b65479334eb8bf4114a04836f5ce8d7d000f9bb576782.exe
Resource
win10v2004-20230703-en
Target
6a51c4537ce7705d5f5b65479334eb8bf4114a04836f5ce8d7d000f9bb576782
Size
870KB
MD5
10bb2852e41f250577a93e78fe8e51c1
SHA1
f23ae211c16f151b9d51342a332584d9439748a9
SHA256
6a51c4537ce7705d5f5b65479334eb8bf4114a04836f5ce8d7d000f9bb576782
SHA512
80fb5d90fd74fccaab527da985d6c378f3e40efabf739af6c2faa7e06fc5abb6629a01277b26be538854697990e841359b349980b2ca8df8764c925373fa02c5
SSDEEP
24576:mQO1ydcC6g6v66666ES66666E6kD66666E66gD66666E664D666U66yH6q66HW6V:mQXcC6g6v66666ES66666E6kD66666Eh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0Thread@AsyncTask@@QAE@PBD@Z
?Run@Thread@AsyncTask@@MAEXPAVMessageLoop@2@@Z
?Stop@Thread@AsyncTask@@QAEXXZ
??1Thread@AsyncTask@@UAE@XZ
?Init@Thread@AsyncTask@@MAEXXZ
?CleanUp@Thread@AsyncTask@@MAEXXZ
?CleanUpAfterMessageLoopDestruction@Thread@AsyncTask@@MAEXXZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?SetWorkerFactory@MessageLoop@AsyncTask@@QAEXPAVWorkerFactory@12@@Z
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1MessageLoopForUI@AsyncTask@@UAE@XZ
??0MessageLoopForUI@AsyncTask@@QAE@XZ
?ThreadMain@Thread@AsyncTask@@EAEXXZ
?Quit@MessageLoop@AsyncTask@@QAEXXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??1CTXStringA@@QAE@XZ
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?Base64Decode@Encode@Util@@YA?AVCTXBuffer@@PB_W@Z
ord30
??0CTXBSTR@@QAE@XZ
?IsFileExist@FS@@YAHPB_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
ord22
?IsEmpty@CTXStringW@@QBE_NXZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@PB_WH@Z
?Empty@CTXStringW@@QAEXXZ
?AppendChar@CTXStringW@@QAEX_W@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?GetLength@CTXStringW@@QBEHXZ
??ACTXStringW@@QBE_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GetLength@CTXStringA@@QBEHXZ
?GetString@CTXStringA@@QBEPBDXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??BCTXStringA@@QBEPBDXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformModeConfig@Boot@Util@@YAHXZ
?InitNetwork@Network@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?TXLoadString@@YAPB_WPB_W0@Z
?Append@CTXStringW@@QAEXABV1@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z
??0CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??4CTXStringA@@QAEAAV0@PBD@Z
?FlushLog@TXLog@@YAXXZ
??M@YA_NABVCTXStringA@@0@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXBSTR@@QAE@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
??0CDPIScaleIgnoreHelper@@QAE@XZ
??1CDPIScaleIgnoreHelper@@QAE@XZ
?ScaleRECT@DPI@GF@Util@@YAXPAUtagRECT@@@Z
?GetDPIScale@DPI@GF@Util@@YAMXZ
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z
??0CDPIScaleIgnoreResetHelper@@QAE@XZ
??1CDPIScaleIgnoreResetHelper@@QAE@XZ
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?CreateCanvas@DPI@GF@Util@@YAPAUHGCANVAS__@@HHPAU4@@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?tim_rpc_alloc_context@@YAPAXXZ
?tim_rpc_set_target_window@@YAHPAXPAUHWND__@@@Z
?tim_rpc_set_timeout@@YAHPAXI@Z
?tim_rpc_get_invoke_error_code@@YAHPAXPAI@Z
?tim_rpc_get_server_error_code@@YAHPAXPAI@Z
?tim_rpc_set_method@@YAHPAXPBDI@Z
?tim_rpc_set_params@@YAHPAXPBDI@Z
?tim_rpc_invoke@@YAPAXPAXI@Z
?tim_rpc_get_result_data@@YAPBDPAXPAI@Z
?tim_rpc_free_invoke_result@@YAXPAX@Z
?tim_rpc_get_invoke_error_msg@@YAPBDPAX@Z
?tim_rpc_free_context@@YAXPAX@Z
DrawCircle
SetColor
SetSmooth
SetDrawStyle
SetCanvasFilter
GetTexture
CanvasToTexture
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
IsDebuggerPresent
OutputDebugStringW
ExpandEnvironmentStringsW
Sleep
CreateFileMappingW
CloseHandle
MapViewOfFile
UnmapViewOfFile
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetFullPathNameW
InterlockedExchange
CreateFileW
GetFileSizeEx
RaiseException
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeSListHead
CharNextW
FindWindowExW
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
CommandLineToArgvW
ShellExecuteExW
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
OleUninitialize
OleInitialize
CoCreateInstance
VarUI4FromStr
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
VariantChangeType
VariantClear
SysAllocString
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
PathIsDirectoryW
PathFileExistsW
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
CertGetNameStringW
memcpy
memmove
memcmp
_purecall
memset
wcsstr
_CxxThrowException
__std_exception_destroy
_except_handler4_common
__std_terminate
__CxxFrameHandler3
__std_exception_copy
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_c_exit
_invalid_parameter_noinfo_noreturn
_exit
_controlfp_s
_set_app_type
_initialize_onexit_table
_errno
_register_thread_local_exe_atexit_callback
_seh_filter_exe
exit
_invalid_parameter_noinfo
_cexit
terminate
_crt_atexit
_register_onexit_function
strlen
strcmp
wcsncpy_s
towlower
wcslen
free
malloc
_recalloc
_callnewh
_set_new_mode
_wtoi64
strtoull
_set_fmode
__p__commode
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__setusermatherr
_except1
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE