Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2ba8b94a4e7a66be0edbb6440b9edb0c785ae6141c6b7becd703d06291aad59e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2ba8b94a4e7a66be0edbb6440b9edb0c785ae6141c6b7becd703d06291aad59e.exe
Resource
win10v2004-20230915-en
Target
2ba8b94a4e7a66be0edbb6440b9edb0c785ae6141c6b7becd703d06291aad59e
Size
970KB
MD5
60d61bb1d00281f3dd1f0404357027f7
SHA1
24969d443f098606cbf157833429b712c9957ed8
SHA256
2ba8b94a4e7a66be0edbb6440b9edb0c785ae6141c6b7becd703d06291aad59e
SHA512
32fbd34048e649f3d4d400f6b183a65cc050f4798b353806c5ae31aa381c21c7b015feeee306d6066467fd7de9dea52ae7129a3c3b133625213d2fc49c66f397
SSDEEP
12288:9fmcJAHjFSornz0Lmcb8R97777777777777777778777777777777777777m777S:9fmc1oTLg4o1R
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SHDeleteValueW
SHGetValueW
SHSetValueW
?HandleTTInstanceObject@Module@Util@@YAHH@Z
?GetModuleConfig@ModuleConfig@@YAHPAPAUIUnknown@@AAH@Z
?SetCoreCenterPtr@Module@Util@@YAHPAUIUnknown@@@Z
?IsURLEx@Module@Util@@YAHPB_W@Z
?GetMainWindowHandler@Module@Util@@YAPAUHWND__@@XZ
?IsTTInstanceExsist@Module@Util@@YAHXZ
?GetCrashReportInfoFileName@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?CreateTlss@Module@Util@@YAHXZ
?SetCmdLineUrl@Module@Util@@YAXPB_W@Z
?TTLoadLibrary@Module@Util@@YAPAUHINSTANCE__@@PB_WH@Z
?SetTTAsDefaultInVistaAsAdminPri@Module@Util@@YAHH@Z
?SetGlobalData@Module@Util@@YAXHK@Z
?UnInstallTT@Module@Util@@YAXXZ
?IsTTDefaultBrowserEx@Module@Util@@YAKXZ
?EnumTTIntance@Module@Util@@YAKXZ
?GetRegItem@Module@Util@@YAHPAUHKEY__@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@1AAV45@@Z
?OutputCrashURLs@Module@Util@@YAXAAVCComBSTR@ATL@@@Z
?IsUniqueOrMultiTTInstance@Module@Util@@YAKXZ
?SetStartupTime@Module@Util@@YAXXZ
?IsAllowMultiTTIntance@Module@Util@@YAHXZ
?ReleaseModuleConfig@ModuleConfig@@YAXXZ
?DRReportURL@DataReport@Util@@YAXXZ
?DRReport@DataReport@Util@@YAXPAXH@Z
?DRSetWord@DataReport@Util@@YAXPAXKG@Z
?DRGetLTHandle@DataReport@Util@@YAPAXK@Z
?TT_Log@TTLogDef@@SAXW4ENUM_LOG_SERVERITY@@PB_W1ZZ
?CreateTTData@Data@Util@@YAJABU_GUID@@PAPAX@Z
?GetCoreCenterPtr@Module@Util@@YAPAUIUnknown@@XZ
?CreateObjectFromFile@Module@Util@@YAJPA_WPAUIUnknown@@ABU_GUID@@2PAPAXPAPAUHINSTANCE__@@@Z
?TXSetLanguageCode@@YAJPB_W@Z
?TXSetStringBundle@@YAXPB_W0@Z
?GetParentDir@Module@Util@@YAHPA_WPAPA_W@Z
?GetBinPath@Module@Util@@YAHPAPA_W@Z
?ReleaseTTInstanceObject@Module@Util@@YAXXZ
?SetMainThreadID@Module@Util@@YAHABK@Z
?TT_HookAPI@Module@Util@@YAXH@Z
?GetCompileVerInfo@Module@Util@@YAHAAG000@Z
?GetCallstackInfoFileName@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetMainThreadID@Module@Util@@YAHAAK@Z
?GetModuleHash@Crypt@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetCompileVerInfo@Module@Util@@YAHPAPA_W@Z
?GetOSVersion@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?ShellExecute_tt@Module@Util@@YAPAUHINSTANCE__@@PAUHWND__@@PB_W111H@Z
?g_bAppExit@@3HA
?DoRebootTT@Module@Util@@YAXXZ
?DRInit@DataReport@Util@@YAXPB_W@Z
?InitFiles@Module@Util@@YAHH@Z
?GetGlobalData@Module@Util@@YAHHPAK@Z
?AddSafeVistUrlpara@Module@Util@@YAHPA_W0@Z
?DeleteRegItem@Module@Util@@YAHPAUHKEY__@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@1H@Z
?SetModuleApp@Module@Util@@YAXPAX@Z
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
GetStartupInfoW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
LocalAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
LoadLibraryA
GetVersionExA
HeapSize
HeapDestroy
HeapReAlloc
HeapFree
GetLastError
GetCurrentProcess
lstrlenA
VirtualQueryEx
MultiByteToWideChar
SetUnhandledExceptionFilter
GetVersion
GetCurrentThread
TerminateThread
VirtualQuery
GetModuleFileNameW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
DeleteFileW
WritePrivateProfileStringW
Sleep
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InterlockedDecrement
InitializeCriticalSection
InterlockedIncrement
WideCharToMultiByte
HeapAlloc
GetProcessHeap
FormatMessageW
GetCurrentThreadId
GetProcAddress
DispatchMessageW
TranslateMessage
GetMessageW
DefWindowProcW
ShowWindow
SendMessageTimeoutW
PeekMessageW
DestroyWindow
EnableWindow
IsWindow
MessageBoxW
UnregisterClassA
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegCreateKeyW
RegCloseKey
OleInitialize
CoCreateInstance
CLSIDFromString
OleUninitialize
VariantClear
SysAllocStringByteLen
SysAllocString
VarBstrCmp
SysAllocStringLen
SysFreeString
SysStringLen
ord30
ord64
ord61
ord23
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
malloc
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
__setusermatherr
??0exception@std@@QAE@ABQBD@Z
wcsrchr
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
vsprintf_s
_vscprintf
_wcsicmp
_wcslwr_s
wcscmp
memset
wcsstr
_recalloc
memmove_s
free
??_V@YAXPAX@Z
??3@YAXPAX@Z
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
memcpy_s
_CxxThrowException
_vscwprintf
??2@YAPAXI@Z
swprintf_s
__CxxFrameHandler3
wcslen
??0exception@std@@QAE@XZ
vswprintf_s
InitCommonControlsEx
SymSetOptions
SymInitialize
SymFunctionTableAccess
StackWalk
SymGetSymFromAddr
SymGetModuleInfo
SymLoadModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ