Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
1c8e535c3f02c2e3b799d88990f7b08fe948662d6e986a401047525084515d04.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1c8e535c3f02c2e3b799d88990f7b08fe948662d6e986a401047525084515d04.exe
Resource
win10v2004-20230915-en
Target
1c8e535c3f02c2e3b799d88990f7b08fe948662d6e986a401047525084515d04
Size
876KB
MD5
03757c6fe0b3fda2ef751e2781ee3e28
SHA1
3984714ab7428cfa47d46a0f942cbd121c3ae304
SHA256
1c8e535c3f02c2e3b799d88990f7b08fe948662d6e986a401047525084515d04
SHA512
701ec6dff8fa39baeccac6e140d732f42c68d58baf69f8f09fd88b2c0c8ab78eb03d34caaf24f668791e45193497f5585d854f034bae51e5808e0f47d58b937e
SSDEEP
12288:A7f0LUHjFSornz0Lmcb8R97777777777777777778777777777777777777m777T:A7f0DoTng4oG
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SHDeleteValueW
SHGetValueW
SHSetValueW
WSACleanup
WSAStartup
?CreateObjectFromFile@Module@Util@@YAJPA_WPAUIUnknown@@ABU_GUID@@2PAPAXPAPAUHINSTANCE__@@@Z
?TXSetLanguageCode@@YAJPB_W@Z
?TXSetStringBundle@@YAXPB_W0@Z
?GetParentDir@Module@Util@@YAHPA_WPAPA_W@Z
?GetBinPath@Module@Util@@YAHPAPA_W@Z
?ReleaseTTInstanceObject@Module@Util@@YAXXZ
?HandleTTInstanceObject@Module@Util@@YAHH@Z
?IsUniqueOrMultiTTInstance@Module@Util@@YAKXZ
?GetModuleConfig@ModuleConfig@@YAHPAPAUIUnknown@@AAH@Z
?SetCmdLineUrl@Module@Util@@YAXPB_W@Z
?SetCoreCenterPtr@Module@Util@@YAHPAUIUnknown@@@Z
?IsURLEx@Module@Util@@YAHPB_W@Z
?GetMainWindowHandler@Module@Util@@YAPAUHWND__@@XZ
?SetGlobalData@Module@Util@@YAXHK@Z
?IsTTInstanceExsist@Module@Util@@YAHXZ
?GetCrashReportInfoFileName@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?SetStartbyInstall@Module@Util@@YAX_N@Z
?SetStartupTime@Module@Util@@YAXXZ
?SetMainThreadID@Module@Util@@YAHABK@Z
?IsAllowMultiTTIntance@Module@Util@@YAHXZ
?ReleaseModuleConfig@ModuleConfig@@YAXXZ
?DRReport@DataReport@Util@@YAXPAXH@Z
?DRSetWord@DataReport@Util@@YAXPAXKG@Z
?DRGetLTHandle@DataReport@Util@@YAPAXK@Z
?TT_Log@TTLogDef@@SAXW4ENUM_LOG_SERVERITY@@PB_W1ZZ
?CreateTTData@Data@Util@@YAJABU_GUID@@PAPAX@Z
?GetCoreCenterPtr@Module@Util@@YAPAUIUnknown@@XZ
?TT_HookAPI@Module@Util@@YAXH@Z
?SetModuleApp@Module@Util@@YAXPAX@Z
?InitDBFile@Module@Util@@YAHXZ
?DRInit@DataReport@Util@@YAXPB_W@Z
?DoRebootTT@Module@Util@@YAXXZ
?g_bAppExit@@3HA
?GetOSVersion@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetCompileVerInfo@Module@Util@@YAHPAPA_W@Z
?TTLoadLibrary@Module@Util@@YAPAUHINSTANCE__@@PB_WH@Z
?SetTTAsDefaultInVistaAsAdminPri@Module@Util@@YAHH@Z
?UnInstallTT@Module@Util@@YAXXZ
?EnumTTIntance@Module@Util@@YAKXZ
?OutputCrashURLs@Module@Util@@YAXAAVCComBSTR@ATL@@@Z
?GetCompileVerInfo@Module@Util@@YAHAAG000@Z
?GetCallstackInfoFileName@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetMainThreadID@Module@Util@@YAHAAK@Z
?GetModuleHash@Crypt@Util@@YAHPAVCComBSTR@ATL@@@Z
GetStartupInfoW
GetTickCount
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
HeapDestroy
HeapReAlloc
GetVersionExA
InterlockedExchange
HeapFree
GetLastError
GetCurrentProcess
lstrlenA
VirtualQueryEx
MultiByteToWideChar
SetUnhandledExceptionFilter
GetVersion
GetCurrentThread
TerminateThread
VirtualQuery
GetModuleFileNameW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
DeleteFileW
WritePrivateProfileStringW
Sleep
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InterlockedDecrement
InitializeCriticalSection
InterlockedIncrement
WideCharToMultiByte
HeapAlloc
GetProcessHeap
FormatMessageW
GetCurrentThreadId
GetProcAddress
DispatchMessageW
TranslateMessage
GetMessageW
DefWindowProcW
ShowWindow
SendMessageTimeoutW
PeekMessageW
DestroyWindow
EnableWindow
IsWindow
MessageBoxW
UnregisterClassA
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegCreateKeyW
RegCloseKey
ShellExecuteW
OleInitialize
CLSIDFromString
CoCreateInstance
OleUninitialize
VariantClear
SysStringLen
SysAllocStringByteLen
SysAllocString
VarBstrCmp
SysAllocStringLen
SysFreeString
ord30
ord64
ord23
ord61
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
malloc
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
__setusermatherr
wcsrchr
__wargv
__argc
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
vsprintf_s
_vscprintf
_wcsicmp
_wcslwr_s
_CxxThrowException
memcpy_s
wcscmp
memset
wcsstr
_recalloc
memmove_s
??3@YAXPAX@Z
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
_vscwprintf
vswprintf_s
wcslen
free
??_V@YAXPAX@Z
??2@YAPAXI@Z
swprintf_s
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
InitCommonControlsEx
StackWalk
SymInitialize
SymGetModuleInfo
SymLoadModule
SymSetOptions
SymGetSymFromAddr
SymFunctionTableAccess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ