Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
d4c4e8b53c4dd0248e4996aec13ca5ea04a3b1dd7ae23c46caab1c3d1ce859a5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d4c4e8b53c4dd0248e4996aec13ca5ea04a3b1dd7ae23c46caab1c3d1ce859a5.exe
Resource
win10v2004-20230915-en
Target
d4c4e8b53c4dd0248e4996aec13ca5ea04a3b1dd7ae23c46caab1c3d1ce859a5
Size
971KB
MD5
837a976b0086b68fcb5a872c997792ef
SHA1
762ac64846e07a5a54b296dd8b7901f5ebb25988
SHA256
d4c4e8b53c4dd0248e4996aec13ca5ea04a3b1dd7ae23c46caab1c3d1ce859a5
SHA512
56aeff05b904e57817353013ecf8080ca97e5dea3aa7a1957eb29061b055ba619f953e02991c246b40511f5233e37d18f92a2f015509a2c6336d1e83110514e4
SSDEEP
12288:uhiLnnpHjFSornz0Lmcb8R97777777777777777778777777777777777777m77Z:uhiLGoTAg4o1me
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitCommonControlsEx
SHDeleteValueW
SHGetValueW
SHSetValueW
?GetCoreCenterPtr@Module@Util@@YAPAUIUnknown@@XZ
?ReleaseModuleConfig@ModuleConfig@@YAXXZ
?DRReportURL@DataReport@Util@@YAXXZ
?DRReport@DataReport@Util@@YAXPAXH@Z
?DRSetWord@DataReport@Util@@YAXPAXKG@Z
?DRGetLTHandle@DataReport@Util@@YAPAXK@Z
?TT_Log@TTLogDef@@SAXW4ENUM_LOG_SERVERITY@@PB_W1ZZ
?CreateTTData@Data@Util@@YAJABU_GUID@@PAPAX@Z
?CreateTlss@Module@Util@@YAHXZ
?IsUniqueOrMultiTTInstance@Module@Util@@YAKXZ
?SetStartupTime@Module@Util@@YAXXZ
?SetMainThreadID@Module@Util@@YAHABK@Z
?TT_HookAPI@Module@Util@@YAXH@Z
?SetModuleApp@Module@Util@@YAXPAX@Z
?IsURLEx@Module@Util@@YAHPB_W@Z
?GetRegItem@Module@Util@@YAHPAUHKEY__@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@1AAV45@@Z
?IsAllowMultiTTIntance@Module@Util@@YAHXZ
?AddSafeVistUrlpara@Module@Util@@YAHPA_W0@Z
?GetGlobalData@Module@Util@@YAHHPAK@Z
?InitFiles@Module@Util@@YAHH@Z
?DRInit@DataReport@Util@@YAXPB_W@Z
?DoRebootTT@Module@Util@@YAXXZ
?g_bAppExit@@3HA
?ShellExecute_tt@Module@Util@@YAPAUHINSTANCE__@@PAUHWND__@@PB_W111H@Z
?GetOSVersion@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetCompileVerInfo@Module@Util@@YAHPAPA_W@Z
?GetModuleHash@Crypt@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetMainThreadID@Module@Util@@YAHAAK@Z
?GetCallstackInfoFileName@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetCompileVerInfo@Module@Util@@YAHAAG000@Z
?OutputCrashURLs@Module@Util@@YAXAAVCComBSTR@ATL@@@Z
?EnumTTIntance@Module@Util@@YAKXZ
?IsTTDefaultBrowserEx@Module@Util@@YAKXZ
?UnInstallTT@Module@Util@@YAXXZ
?SetGlobalData@Module@Util@@YAXHK@Z
?SetTTAsDefaultInVistaAsAdminPri@Module@Util@@YAHH@Z
?TTLoadLibrary@Module@Util@@YAPAUHINSTANCE__@@PB_WH@Z
?SetStartbyInstall@Module@Util@@YAX_N@Z
?GetCrashReportInfoFileName@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?IsTTInstanceExsist@Module@Util@@YAHXZ
?GetMainWindowHandler@Module@Util@@YAPAUHWND__@@XZ
?SetCoreCenterPtr@Module@Util@@YAHPAUIUnknown@@@Z
?SetCmdLineUrl@Module@Util@@YAXPB_W@Z
?GetModuleConfig@ModuleConfig@@YAHPAPAUIUnknown@@AAH@Z
?HandleTTInstanceObject@Module@Util@@YAHH@Z
?ReleaseTTInstanceObject@Module@Util@@YAXXZ
?GetBinPath@Module@Util@@YAHPAPA_W@Z
?GetParentDir@Module@Util@@YAHPA_WPAPA_W@Z
?TXSetStringBundle@@YAXPB_W0@Z
?TXSetLanguageCode@@YAJPB_W@Z
?CreateObjectFromFile@Module@Util@@YAJPA_WPAUIUnknown@@ABU_GUID@@2PAPAXPAPAUHINSTANCE__@@@Z
?DeleteRegItem@Module@Util@@YAHPAUHKEY__@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@1H@Z
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
LocalAlloc
FreeLibrary
InterlockedExchange
LoadLibraryA
GetVersionExA
HeapDestroy
HeapReAlloc
HeapFree
GetLastError
GetCurrentProcess
lstrlenA
VirtualQueryEx
MultiByteToWideChar
SetUnhandledExceptionFilter
GetVersion
GetCurrentThread
TerminateThread
VirtualQuery
GetModuleFileNameW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
DeleteFileW
WritePrivateProfileStringW
Sleep
GetProcAddress
GetCurrentThreadId
FormatMessageW
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InterlockedDecrement
InitializeCriticalSection
InterlockedIncrement
WideCharToMultiByte
HeapAlloc
GetProcessHeap
MessageBoxW
IsWindow
EnableWindow
DestroyWindow
PeekMessageW
SendMessageTimeoutW
ShowWindow
DefWindowProcW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassA
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyW
RegCloseKey
OleInitialize
OleUninitialize
CLSIDFromString
CoCreateInstance
SysFreeString
SysAllocStringLen
VarBstrCmp
SysAllocString
VariantClear
SysAllocStringByteLen
SysStringLen
ord23
ord61
ord64
ord30
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
wcsrchr
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
malloc
?terminate@@YAXXZ
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
__wargv
_configthreadlocale
__setusermatherr
_adjust_fdiv
_controlfp_s
_invoke_watson
_crt_debugger_hook
??_V@YAXPAX@Z
??2@YAPAXI@Z
swprintf_s
__CxxFrameHandler3
wcslen
vswprintf_s
__p__commode
_vscwprintf
__p__fmode
__set_app_type
_wcsicmp
_CxxThrowException
memcpy_s
??3@YAXPAX@Z
__argc
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
vsprintf_s
_vscprintf
_wcslwr_s
wcscmp
memset
wcsstr
_recalloc
memmove_s
_initterm_e
free
?_type_info_dtor_internal_method@type_info@@QAEXXZ
SymSetOptions
SymInitialize
SymFunctionTableAccess
StackWalk
SymGetSymFromAddr
SymGetModuleInfo
SymLoadModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ