Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
ed114ad5b983dbe5c958ac4356d8e422aedbbdefc2c40c632ea4e9b0e283c18c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ed114ad5b983dbe5c958ac4356d8e422aedbbdefc2c40c632ea4e9b0e283c18c.exe
Resource
win10v2004-20230915-en
Target
ed114ad5b983dbe5c958ac4356d8e422aedbbdefc2c40c632ea4e9b0e283c18c
Size
132KB
MD5
65da040861dde1c1b0526d3ee2e83623
SHA1
300220c0925a184bf26b8d3f1c98e7333ef4c684
SHA256
ed114ad5b983dbe5c958ac4356d8e422aedbbdefc2c40c632ea4e9b0e283c18c
SHA512
8b9ec790b7b698e8d1bf31861a4dc037f5f9e06a1ff3042c41bc20146b0f372c9d551ac22a3450a5fd0453190f25b67e13975491bc134a620559902ca96ebefc
SSDEEP
3072:2fLUjdYXuzRDHtSLwHOg7c1ewqMfNda/:2oDh3OgqqMfO
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
SymGetModuleInfo
SymCleanup
SymInitialize
SymSetOptions
SymLoadModule
InternetCloseHandle
InternetOpenA
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
GetModuleFileNameExA
ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetTickCount
DeleteFileW
CreateFileW
ReadFile
UnhandledExceptionFilter
CloseHandle
GetTempPathW
CreateDirectoryW
VirtualQueryEx
CreateFileA
ReadProcessMemory
WriteProcessMemory
OpenThread
GetProcAddress
GetModuleHandleW
SetUnhandledExceptionFilter
IsDebuggerPresent
SetFilePointer
GetVersionExW
CreateProcessW
HeapAlloc
GetProcessHeap
VirtualProtect
OpenProcess
HeapFree
QueryPerformanceCounter
GetModuleFileNameW
GetCurrentThreadId
SetCurrentDirectoryW
WriteFile
GetCurrentProcessId
SetEvent
GlobalLock
GlobalUnlock
GetPrivateProfileSectionW
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalFree
GetFileSize
Sleep
FreeLibrary
GetThreadSelectorEntry
GetFileAttributesW
GetSystemTimeAsFileTime
IsWindow
DestroyMenu
TrackPopupMenu
GetWindowThreadProcessId
GetMenuItemCount
CreatePopupMenu
CloseClipboard
SetClipboardData
SetDlgItemTextW
EmptyClipboard
SetWindowPos
OpenClipboard
LoadImageW
RegisterClipboardFormatW
SendMessageW
LoadIconW
GetKeyState
InvalidateRect
GetClientRect
ShowWindow
MapDialogRect
GetWindowRect
MapWindowPoints
SendDlgItemMessageW
SetWindowLongW
GetWindowTextW
CallWindowProcW
GetWindowTextLengthW
GetDlgItem
ClientToScreen
DrawIconEx
EnableWindow
SetWindowTextW
GetWindow
EndDialog
MessageBoxW
DialogBoxParamW
DeleteObject
GetStockObject
SetTextColor
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SHGetFileInfoW
SHGetDesktopFolder
ord155
SHBindToParent
ShellExecuteW
DoDragDrop
OleUninitialize
OleInitialize
ord10
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0CZipBuffers@@QAE@XZ
??1CZipBuffers@@QAE@XZ
?Left@CTXStringA@@QBE?AV1@H@Z
?MatchWildcard@FS@Util@@YAHPBD0@Z
??YCTXStringA@@QAEAAV0@D@Z
?SetAt@CTXStringW@@QAEXH_W@Z
??4CTXStringA@@QAEAAV0@PBD@Z
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
??0CTXStringA@@QAE@ABV0@@Z
?GetBuffer@CTXStringA@@QAEPADXZ
?FormatV@CTXStringA@@QAEXPBDPAD@Z
?Utf8FromWSLimit@Convert@Util@@YA?AVCTXStringA@@HPB_WH@Z
?GetLogByFilter@TXLog@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVCTXStringW@@K0K@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??0CTXStringA@@QAE@PBD@Z
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
??0CTXStringA@@QAE@PBDH@Z
??M@YA_NABVCTXStringA@@0@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??1CFmtString@@QAE@XZ
?Length@CTXBSTR@@QBEIXZ
??0CFmtString@@QAE@XZ
??1CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?SetConfigFile@TXI18N@@YAHPB_W0@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?Trim@CTXStringW@@QAEAAV1@XZ
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABV0@@Z
?LoadStringW@CTXStringW@@QAEHPAUHINSTANCE__@@I@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?AddBuffer@CZipBuffers@@QAE_NPBXIPBD@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@XZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??8@YA_NABVCTXStringW@@0@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?MakeLower@CTXStringA@@QAEAAV1@XZ
??YCTXStringA@@QAEAAV0@ABV0@@Z
?Format@CTXStringA@@QAAXPBDZZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??BCTXStringA@@QBEPBDXZ
?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
??YCTXStringA@@QAEAAV0@PBD@Z
?Format@CTXStringW@@QAAXPB_WZZ
??BCTXStringW@@QBEPB_WXZ
wcslcat
wcslcpy
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??M@YA_NABVCTXStringW@@0@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??YCTXStringW@@QAEAAV0@_W@Z
?Empty@CTXStringW@@QAEXXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?Preallocate@CTXStringW@@QAEXH@Z
??BCTXBSTR@@QBEPA_WXZ
?Replace@CTXStringW@@QAEH_W0@Z
?GetZip@CZipBuffers@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
?GetLength@CTXStringA@@QBEHXZ
?GetLength@CTXStringW@@QBEHXZ
??4CTXStringA@@QAEAAV0@ABV0@@Z
__setusermatherr
_configthreadlocale
_initterm
_wcmdln
exit
_XcptFilter
_exit
_CxxThrowException
_cexit
__wgetmainargs
_adjust_fdiv
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
??3@YAXPAX@Z
_invalid_parameter_noinfo
_snwprintf
??_V@YAXPAX@Z
_gmtime32
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_lock
_encode_pointer
__dllonexit
_unlock
strrchr
_snprintf
_wfopen
??0exception@std@@QAE@ABQBD@Z
fread
??2@YAPAXI@Z
fclose
??0exception@std@@QAE@ABV01@@Z
__argc
__wargv
wcsncmp
swscanf
malloc
free
srand
_time64
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
wcsrchr
_purecall
_wcsicmp
memmove_s
strchr
_time32
strncmp
atoi
_initterm_e
memset
__CxxFrameHandler3
memcpy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ