Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
liclua.exe/liclua.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
liclua.exe/liclua.exe
Resource
win10v2004-20230915-en
Target
84431F1578BD9D5E88F8666DEA35A621.zip
Size
296KB
MD5
2a7f338e503a8a95151b92c08add4050
SHA1
8074128717b567eacaf0975f28e658250a1a7e44
SHA256
c933d2387545032b0b04e9c3bcfe00c2fa8bd0de9085f3b527468bc4a7efd425
SHA512
8ec73d2db0d892ec9a698d50abb517de240c99df1b0cdac0ecf6ab420502c18a7ab191c320006740f75d4f719fc6f0a58ec5d78b897727ed094be55f773807f4
SSDEEP
6144:CmdDl9NB0YADZVdiujPEyotKv/RFSuw6pn8Ki0vErVKo7faZe:CmdDlixDnAKErsSuzf6RfOe
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
RegCreateKeyExW
RegOpenKeyExW
RegGetValueW
RegQueryValueExW
RegCloseKey
EventWriteTransfer
EventRegister
EventUnregister
GetCurrentThreadId
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
IsValidCodePage
SetLastError
FileTimeToSystemTime
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
CloseHandle
GetCurrentProcess
GetSystemTimeAsFileTime
TerminateProcess
GetModuleFileNameA
GetShortPathNameA
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
LoadLibraryExW
GetProcAddress
IsWow64Process
GetCurrentProcessId
GetModuleHandleExW
K32GetProcessMemoryInfo
GlobalMemoryStatusEx
SetErrorMode
LeaveCriticalSection
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
InitOnceBeginInitialize
InitOnceComplete
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
CoUninitialize
CoInitializeEx
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
__CxxFrameHandler4
__current_exception_context
memcpy
__current_exception
__std_exception_destroy
_CxxThrowException
memset
__C_specific_handler_noexcept
wcsrchr
__std_terminate
_purecall
__C_specific_handler
memcmp
memmove
__std_exception_copy
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?uncaught_exceptions@std@@YAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
_Thrd_id
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?_Xbad_function_call@std@@YAXXZ
_Query_perf_counter
_Query_perf_frequency
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?_Xbad_alloc@std@@YAXXZ
malloc
_set_new_mode
free
__stdio_common_vsnwprintf_s
_set_fmode
__p__commode
__stdio_common_vswprintf_s
_invalid_parameter_noinfo_noreturn
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_get_narrow_winmain_command_line
_initialize_narrow_environment
_initialize_onexit_table
_exit
_crt_atexit
_configure_narrow_argv
_set_app_type
_seh_filter_exe
terminate
_invalid_parameter_noinfo
_errno
_register_onexit_function
exit
abort
isdigit
wcsncat_s
strcmp
_stricmp
strnlen
strncpy_s
wcsncpy_s
wcscpy_s
wcscmp
wcsnlen
_wtol
__initialize_lconv_for_unsigned_char
_configthreadlocale
__setusermatherr
_dclass
round
log10
floor
ceilf
_fdclass
pow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ