Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
499e7279e42a6647e3e95b9e184332158027bdad19feb49ec9ddf7ea0d5b6bd2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
499e7279e42a6647e3e95b9e184332158027bdad19feb49ec9ddf7ea0d5b6bd2.exe
Resource
win10v2004-20230824-en
Target
499e7279e42a6647e3e95b9e184332158027bdad19feb49ec9ddf7ea0d5b6bd2
Size
129KB
MD5
221c4949e79f33597f7b93e589d9a157
SHA1
bb8539089f0a17181af3ca8bb077e581019657f3
SHA256
499e7279e42a6647e3e95b9e184332158027bdad19feb49ec9ddf7ea0d5b6bd2
SHA512
b1289d52aec3b8155e6573ec16219491d929ff89148d61d781e876620c9f6eaac2529b91d4f3dd3e5e1853c9d62a1791ced8e11c5a94c9ae9b55a40f89c9ee77
SSDEEP
3072:kkniRopDrxcjG2LugRvOGBTfD3aNqw1OQ7c/ewqMfNdahZ:kkniRo1rqXGGBTfDqNXOQcqMfcZ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
SymCleanup
SymInitialize
SymSetOptions
SymLoadModule
SymGetModuleInfo
InternetCloseHandle
InternetOpenA
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
GetModuleFileNameExA
ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetTickCount
DeleteFileW
CreateFileW
ReadFile
SetFilePointer
CloseHandle
GetCurrentProcess
CreateDirectoryW
VirtualQueryEx
CreateFileA
ReadProcessMemory
WriteProcessMemory
OpenThread
GetProcAddress
GetVersionExW
GetModuleHandleW
SetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTempPathW
GetSystemTimeAsFileTime
CreateProcessW
WriteFile
HeapAlloc
GetProcessHeap
SetEvent
VirtualProtect
OpenProcess
QueryPerformanceCounter
HeapFree
GetCurrentThreadId
GetModuleFileNameW
GetCurrentProcessId
GlobalLock
GlobalUnlock
GetPrivateProfileSectionW
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalFree
GetFileSize
Sleep
LoadLibraryW
FreeLibrary
GetThreadSelectorEntry
GetFileAttributesW
IsDebuggerPresent
IsWindow
DestroyMenu
TrackPopupMenu
GetWindowThreadProcessId
GetMenuItemCount
CreatePopupMenu
CloseClipboard
SetClipboardData
SetDlgItemTextW
EmptyClipboard
SetWindowPos
OpenClipboard
LoadImageW
RegisterClipboardFormatW
SendMessageW
LoadIconW
GetKeyState
InvalidateRect
GetClientRect
ShowWindow
MapDialogRect
GetWindowRect
MapWindowPoints
SendDlgItemMessageW
SetWindowLongW
GetWindowTextW
CallWindowProcW
GetWindowTextLengthW
GetDlgItem
ClientToScreen
DrawIconEx
EnableWindow
SetWindowTextW
GetWindow
MessageBoxW
DialogBoxParamW
EndDialog
SetTextColor
DeleteObject
GetStockObject
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SHGetFileInfoW
SHBindToParent
SHGetDesktopFolder
ord155
ShellExecuteW
DoDragDrop
OleUninitialize
OleInitialize
ord10
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1CZipBuffers@@QAE@XZ
?Left@CTXStringA@@QBE?AV1@H@Z
?MatchWildcard@FS@Util@@YAHPBD0@Z
??YCTXStringA@@QAEAAV0@D@Z
??0CTXStringA@@QAE@PBD@Z
??0CZipBuffers@@QAE@XZ
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
??0CTXStringA@@QAE@ABV0@@Z
?GetBuffer@CTXStringA@@QAEPADXZ
?FormatV@CTXStringA@@QAEXPBDPAD@Z
?Utf8FromWSLimit@Convert@Util@@YA?AVCTXStringA@@HPB_WH@Z
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
?SetAt@CTXStringW@@QAEXH_W@Z
?GetLogByFilter@TXLog@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVCTXStringW@@K0K@Z
??4CTXStringA@@QAEAAV0@PBD@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??0CTXStringA@@QAE@PBDH@Z
??M@YA_NABVCTXStringA@@0@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??1CFmtString@@QAE@XZ
?Length@CTXBSTR@@QBEIXZ
??0CFmtString@@QAE@XZ
??1CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?SetConfigFile@TXI18N@@YAHPB_W0@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?Trim@CTXStringW@@QAEAAV1@XZ
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABV0@@Z
?LoadStringW@CTXStringW@@QAEHPAUHINSTANCE__@@I@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??BCTXBSTR@@QBEPA_WXZ
??8@YA_NABVCTXStringW@@0@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?MakeLower@CTXStringA@@QAEAAV1@XZ
??YCTXStringA@@QAEAAV0@ABV0@@Z
?Format@CTXStringA@@QAAXPBDZZ
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetLength@CTXStringA@@QBEHXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??BCTXStringA@@QBEPBDXZ
?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
??YCTXStringA@@QAEAAV0@PBD@Z
?Format@CTXStringW@@QAAXPB_WZZ
??BCTXStringW@@QBEPB_WXZ
wcslcat
wcslcpy
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??M@YA_NABVCTXStringW@@0@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??YCTXStringW@@QAEAAV0@_W@Z
?Empty@CTXStringW@@QAEXXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetLength@CTXStringW@@QBEHXZ
?Preallocate@CTXStringW@@QAEXH@Z
??1CTXStringA@@QAE@XZ
?AddBuffer@CZipBuffers@@QAE_NPBXIPBD@Z
?Replace@CTXStringW@@QAEH_W0@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?GetZip@CZipBuffers@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0CTXStringA@@QAE@XZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
__setusermatherr
_configthreadlocale
_initterm
_wcmdln
exit
_XcptFilter
_CxxThrowException
_exit
_adjust_fdiv
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
??3@YAXPAX@Z
_invalid_parameter_noinfo
_snwprintf
??_V@YAXPAX@Z
_gmtime32
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_snprintf
_wfopen
??0exception@std@@QAE@ABQBD@Z
fread
??2@YAPAXI@Z
fclose
??0exception@std@@QAE@ABV01@@Z
_purecall
__argc
__wargv
wcsncmp
swscanf
_time64
malloc
free
srand
wcsrchr
_wcsicmp
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
memmove_s
strchr
_time32
strncmp
atoi
_initterm_e
_unlock
memset
__CxxFrameHandler3
memcpy
strrchr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE