Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
e611a1ffbe9e08a2660bc290a581aa0b54637524aaf6040a70e54f97136ce5ac_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e611a1ffbe9e08a2660bc290a581aa0b54637524aaf6040a70e54f97136ce5ac_JC.exe
Resource
win10v2004-20230915-en
Target
e611a1ffbe9e08a2660bc290a581aa0b54637524aaf6040a70e54f97136ce5ac_JC.exe
Size
168KB
MD5
aef6452711538d9021f929a2a5f633cf
SHA1
205b7fab75e77d1ff123991489462d39128e03f6
SHA256
e611a1ffbe9e08a2660bc290a581aa0b54637524aaf6040a70e54f97136ce5ac
SHA512
7ad84d4d3bab3f5a3e14f336d8931bf4b876299000081b2a94a3fcf698c56b82514753b483c5b8d7ae84ddd92ee1c4043fa5e7fb7c4f7e9eb52ca8c794e508b7
SSDEEP
3072:+CNUaViEqjY1uimO3soWBgZNENeo0TzSCOtCUon/BA2gGaA44:dwEq7HO8ohEsxHSC+CUO/Bxk4
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadResource
FindResourceW
FindResourceExW
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
LockResource
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
LocalFree
TerminateProcess
SizeofResource
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
RaiseException
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
ExitProcess
LoadLibraryExW
GetCurrentProcessId
CreateEventW
GetModuleFileNameW
GetLongPathNameW
VirtualQuery
GetPrivateProfileStringW
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
GetVersion
GetProcAddress
SetLastError
CreateMutexW
LocalAlloc
GetModuleHandleW
WaitForSingleObject
ReleaseMutex
CloseHandle
GetModuleHandleA
lstrcmpA
lstrlenA
OpenMutexW
GetLastError
UnregisterClassW
SetWindowLongW
GetClassInfoExW
wsprintfW
LoadCursorW
DefWindowProcW
PeekMessageW
TranslateMessage
DispatchMessageW
WaitMessage
MessageBoxW
PostQuitMessage
DestroyWindow
CreateWindowExW
RegisterClassExW
CallWindowProcW
SendMessageW
AllowSetForegroundWindow
IsWindow
FindWindowW
GetWindowLongW
StringFromCLSID
CoInitialize
CoUninitialize
CoTaskMemFree
VariantCopy
VariantClear
VariantInit
SysFreeString
SysAllocString
SafeArrayUnlock
VariantTimeToSystemTime
SafeArrayLock
SafeArrayCreate
VariantChangeTypeEx
VariantChangeType
?CreateInstance@MNCS@@YGJABU_GUID@@0PAPAX@Z
?GetPropertyHostName@MNPropertySet@@YGJPAUIUnknown@@PAPAG@Z
?Uninitialize@MNCS@@YGJXZ
?Initialize@MNCS@@YGJXZ
?IsUpdateEnabled@MNAppUtils@@YA_NXZ
?GetApp@MNAppUtils@@YAPAUMIDApp@@XZ
?FileExists@MCFile@@SA_NPBG@Z
?AppendFileNameToSpec@MCFile@@SA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PBG0@Z
?RunProgram@MNRunUtils@@YAJPBG0@Z
??1MCRegKey@@UAE@XZ
?Read@MCRegKey@@QAEJPBGAAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
?Open@MCRegKey@@QAEJPAUHKEY__@@PBGK@Z
??0MCRegKey@@QAE@XZ
??1MCModuleVersion@@UAE@XZ
?GetFileVersionInfoW@MCModuleVersion@@QAEHPBG@Z
??0MCModuleVersion@@QAE@XZ
?GetModulePath@MCFile@@SA_NPAUHINSTANCE__@@AAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
?CopyFile2TempDir@MCFile@@SAJPBGAAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@0@Z
PathAppendW
?_Nomemory@std@@YAXXZ
_XprtUninitialize@0
_XprtInitialize@8
_XprtMemFree@4
?Assign@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Attach@TBstr@XPRT@@QAEXPAG@Z
??0TBstr@XPRT@@QAE@XZ
?Detach@TBstr@XPRT@@QAEPAGXZ
??0TBstr@XPRT@@QAE@PBG@Z
??1TBstr@XPRT@@QAE@XZ
?GetString@TBstr@XPRT@@QBEPBGXZ
?Assign@TBstr@XPRT@@QAEAAV12@PBG@Z
??0TBstr@XPRT@@QAE@PBDPBG@Z
kSystemEncoding
_XprtMemAlloc@4
_XprtGetSystemInfo@0
xprt_strlcpy
??0TBstr@XPRT@@QAE@ABV01@@Z
_XprtAtomicIncrement@4
?GetEncodedString@TBstr@XPRT@@QBEPBDPBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
xprt_strcmp
?Compare@TBstr@XPRT@@QBEHPBG@Z
?IsEmpty@TBstr@XPRT@@QBE_NXZ
xprt_memmove
xprt_memset
_XprtAtomicDecrement@4
?Mid@TBstr@XPRT@@QBE?AV12@H@Z
?Mid@TBstr@XPRT@@QBE?AV12@HH@Z
?Find@TBstr@XPRT@@QBEHGH@Z
??1TPtrFromPtrMap@XPRT@@QAE@XZ
?GetAt@TBstr@XPRT@@QBEGH@Z
?Append@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Left@TBstr@XPRT@@QBE?AV12@H@Z
?Empty@TBstr@XPRT@@QAEXXZ
?AppendFileNameToSpec@TFile@XPRT@@SA?AVTBstr@2@PBG0@Z
?DirSpecFromFullSpec@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
??0TBstr@XPRT@@QAE@GH@Z
?TrimRight@TBstr@XPRT@@QAEAAV12@XZ
?TrimLeft@TBstr@XPRT@@QAEAAV12@XZ
?Init@TCritSec@XPRT@@QAEXXZ
?Term@TCritSec@XPRT@@QAEXXZ
??0TPtrFromPtrMap@XPRT@@QAE@H@Z
?Lookup@TPtrFromPtrMap@XPRT@@QBE_NPAXAAPAX@Z
??ATPtrFromPtrMap@XPRT@@QAEAAPAXPAX@Z
?RemoveKey@TPtrFromPtrMap@XPRT@@QAE_NPAX@Z
?Lock@TCritSec@XPRT@@QAEXXZ
?Unlock@TCritSec@XPRT@@QAEXXZ
?SetOptimalLoad@TPtrFromPtrMap@XPRT@@QAEXMMM_N@Z
?RemoveAll@TPtrFromPtrMap@XPRT@@QAEXXZ
xprt_ucslcpy
?GetNextAssoc@TPtrFromPtrMap@XPRT@@QBEXAAPAU__POSITION@2@AAPAX1@Z
?GetStartPosition@TPtrFromPtrMap@XPRT@@QBEPAU__POSITION@2@XZ
?TestAccess@TFile@XPRT@@SA_NPBGI@Z
?Append@TBstr@XPRT@@QAEAAV12@PBG@Z
?Append@TBstr@XPRT@@QAEAAV12@G@Z
?Finish@TMdXDigest@XPRT@@UAEHPAEH@Z
?Update@TMessageDigest@XPRT@@QAEXPBEH@Z
??0TMd5Digest@XPRT@@QAE@H@Z
xprt_memcpy
?GetLength@TBstr@XPRT@@QBEHXZ
xprt_strlen
?ReverseFind@TBstr@XPRT@@QBEHG@Z
xprt_iswdigit
?Format@TBstr@XPRT@@QAAXPBGZZ
?Initialize@MNShellGlobals@@YAJV?$EEPtr@VEEObject@@@@@Z
??0MCDTDParser@@QAE@XZ
?GetDTDPath@MCDTDParser@@QAE?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V23@ABV23@1PAV23@@Z
?LoadDtdStringsMap@MCDTDParser@@QAEJABV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PAPAV?$map@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V12@U?$less@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@V?$allocator@U?$pair@$$CBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V12@@std@@@4@@std@@@Z
??1MCDTDParser@@QAE@XZ
?Uninitialize@MNShellGlobals@@YAJXZ
??0MCCommandLineParser@@QAE@XZ
?ParseCommandLine@MCCommandLineParser@@QAEJABV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
??1MCCommandLineParser@@UAE@XZ
?GetValue@MCCommandLineParser@@QAE_NABV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PAV23@@Z
_cexit
_XcptFilter
_exit
_c_exit
?terminate@@YAXXZ
__security_error_handler
??1type_info@@UAE@XZ
_onexit
__dllonexit
qsort
strcmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
_except_handler3
free
__CxxFrameHandler
_CxxThrowException
wcslen
memmove
realloc
??3@YAXPAX@Z
wcsncmp
wcscmp
_vscwprintf
vswprintf
_wtol
_wtoi
setlocale
_itow
_purecall
memset
malloc
_callnewh
wcsftime
_snwprintf
exit
?GetUpdaterPathAndCmdLine@MNUIHelpers@@YAJAAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@0@Z
?GetUpdateDownloadFolder@MNUIHelpers@@YA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PBG@Z
?GetAppObject@MNUIHelpers@@YAPAUMIDApp@@XZ
?CreateCommandAndExecute@MNUIHelpers@@YAJABV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PAUIUnknown@@1@Z
?DialogManagerFindDialog@MNUIHelpers@@YAJPAUIUnknown@@0ABV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@1AAV?$CComPtr@UMIUIDialog@@@4@@Z
??1MCApplicationEnvironment@@QAE@XZ
?GetLocale@MCApplicationEnvironment@@QAE?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
??0MCApplicationEnvironment@@QAE@XZ
?SetLocale@MCApplicationEnvironment@@QAEJV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
?CreateEnvironment@MCApplicationEnvironment@@QAEJABV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AAV?$EEPtr@VEEObject@@@@@Z
?GetBoxelyShell@MNUIHelpers@@YAJAAVMCShell@MNBoxely@@@Z
?RestartApplication@MNUIHelpers@@YAJW4MELoginMode@@_N@Z
FreeSid
RegQueryValueExA
RegOpenKeyA
RegQueryValueExW
RegOpenKeyW
RegCloseKey
??$GetAppService@UMIDAppPreferencesService@@@MNUIHelpers@@YAJABV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AAV?$CComPtr@UMIDAppPreferencesService@@@2@@Z
??$GetServiceByOwner@V?$CComPtr@UMIDApp@@@ATL@@UMIDAppPreferencesService@@@MNUIHelpers@@YAJABV?$CComPtr@UMIDApp@@@ATL@@ABV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@2@AAV?$CComPtr@UMIDAppPreferencesService@@@2@PAUMIDOwner@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ