Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
liclua.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
liclua.exe
Resource
win10v2004-20230915-en
Target
liclua.exe
Size
632KB
MD5
63500af8ade827705c5cab2352e346b7
SHA1
7de4ecee6e4e81a99f6f4035b200fde372d29d86
SHA256
4033dcc9c6e53fd7bc94c078d02a36452f9a92296f67577807a164286d9e5c24
SHA512
9ac4dc05e278e86866395c0ec40acd938c0c0af4de7d3d707b375bc42f4ecc012bc15641d5e761e95cdac62663f0fb2975d29eb110646aaaa1792ae06ee6fde8
SSDEEP
12288:Idx83oZuhmVcI9sTbevrBtf94D7pZ1s9/BwsaLHeNAsQ87nM7G9uaYFLq3OS:Idx83oZqmVr+LujQ87nM7G537
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
RegCreateKeyExW
RegOpenKeyExW
RegGetValueW
RegQueryValueExW
RegCloseKey
EventWriteTransfer
EventRegister
EventUnregister
GetCurrentThreadId
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
IsValidCodePage
SetLastError
FileTimeToSystemTime
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
CloseHandle
GetCurrentProcess
GetSystemTimeAsFileTime
TerminateProcess
GetModuleFileNameA
GetShortPathNameA
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
LoadLibraryExW
GetProcAddress
IsWow64Process
GetCurrentProcessId
GetModuleHandleExW
K32GetProcessMemoryInfo
GlobalMemoryStatusEx
SetErrorMode
LeaveCriticalSection
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
InitOnceBeginInitialize
InitOnceComplete
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
CoUninitialize
CoInitializeEx
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
__CxxFrameHandler4
__current_exception_context
memcpy
__current_exception
__std_exception_destroy
_CxxThrowException
memset
__C_specific_handler_noexcept
wcsrchr
__std_terminate
_purecall
__C_specific_handler
memcmp
memmove
__std_exception_copy
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?uncaught_exceptions@std@@YAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
_Thrd_id
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?_Xbad_function_call@std@@YAXXZ
_Query_perf_counter
_Query_perf_frequency
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?_Xbad_alloc@std@@YAXXZ
malloc
_set_new_mode
free
__stdio_common_vsnwprintf_s
_set_fmode
__p__commode
__stdio_common_vswprintf_s
_invalid_parameter_noinfo_noreturn
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_get_narrow_winmain_command_line
_initialize_narrow_environment
_initialize_onexit_table
_exit
_crt_atexit
_configure_narrow_argv
_set_app_type
_seh_filter_exe
terminate
_invalid_parameter_noinfo
_errno
_register_onexit_function
exit
abort
isdigit
wcsncat_s
strcmp
_stricmp
strnlen
strncpy_s
wcsncpy_s
wcscpy_s
wcscmp
wcsnlen
_wtol
__initialize_lconv_for_unsigned_char
_configthreadlocale
__setusermatherr
_dclass
round
log10
floor
ceilf
_fdclass
pow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ