Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
36862dda37712011e7f6d071c503a660.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36862dda37712011e7f6d071c503a660.dll
Resource
win10v2004-20231222-en
Target
36862dda37712011e7f6d071c503a660
Size
129KB
MD5
36862dda37712011e7f6d071c503a660
SHA1
33ccfae48479b24d773a302482c84edaf87dd6eb
SHA256
717b74d6981d7f34888db5d7a2950b94b3308cd800d9c1b8c166f627925b01d4
SHA512
e98e410b64738700249f94f290764ebb6422578668e460c347a243393f7321c169584ad34cd5f7e2f37582527002c06461a45cd78bc07f44343c884091909b6c
SSDEEP
3072:UjkPnhLJAqeQHfbrW1WdDDWKLcBkcLSbOtX9AlAVPJI:0QPAq/Hfbi1QeKJc+bOtXm2Va
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
freeaddrinfo
recv
setsockopt
WSASocketW
recvfrom
WSAGetLastError
inet_addr
inet_ntoa
closesocket
WSAStartup
WSACleanup
socket
send
connect
sendto
getaddrinfo
timeGetTime
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerClose
mixerOpen
mixerGetID
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
WinHttpCrackUrl
?Attribute@YGXmlElement@base@yg@@QBEPBDPBD0@Z
?SetAttribute@YGXmlElement@base@yg@@QAE_NPBD0@Z
?FirstChildElement@YGXmlElement@base@yg@@QBE?AV123@PBD@Z
??1YGSmartHttpClient@@QAE@XZ
??1YGXmlElement@base@yg@@QAE@XZ
?RootElement@YGXmlDocument@base@yg@@QBE?AVYGXmlElement@23@PBD@Z
?LoadFromFile@YGXmlDocument@base@yg@@QAE_NPB_W@Z
??1YGXmlDocument@base@yg@@QAE@XZ
??0YGXmlDocument@base@yg@@QAE@XZ
?getCurrentModuleDirEx@YGPath@base@yg@@SAHPAUIYGStringArgW@@PB_W@Z
?getYYGameAppDataPathEx@YGPath@base@yg@@SAXPAUIYGStringArgW@@PB_W@Z
?initWindow@YGWtlRichMenu@@QAE_NIPAUIYGDUIFrameEvent@@PAVCMessageMap@ATL@@@Z
??0YGWtlRichMenu@@QAE@XZ
?popupMenu@YGWtlRichMenu@@QAEXHHW4PopupWay@1@HH@Z
?createMenu@YGWtlRichMenu@@QAEHPB_WPAUHWND__@@_N@Z
?destroyMenu@YGWtlRichMenu@@QAEXXZ
??1YGWtlRichMenu@@QAE@XZ
?getHWND@YGWtlRichMenu@@QBEPAUHWND__@@XZ
?ygdui_mgr_close@dui@yg@@YAJI@Z
?ygdui_mgr_set_image_path@dui@yg@@YAJIPB_W@Z
?ygdui_mgr_set_layout_path@dui@yg@@YAJIPB_W@Z
?ygdui_mgr_set_config_path@dui@yg@@YAJIPB_W@Z
?ygdui_mgr_open@dui@yg@@YAIPB_W@Z
?GetOSVersion@YGOSInfo@base@yg@@SAHXZ
?ygdui_view_handle@dui@yg@@YA?AVYGDUIView@12@I@Z
?NextSiblingElement@YGXmlElement@base@yg@@QBE?AV123@PBD@Z
??0YGDUIView@dui@yg@@QAE@XZ
?PostHttpRequest@YGSmartHttpClient@@QAEHPB_WPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4YGE_HTTP_VERB@1@HHH@Z
?WStringToUtf8@YGCoder@base@yg@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z
??0YGJsonObject@base@yg@@QAE@W4JsonType@YGJsonHandle@12@@Z
??1YGJsonObject@base@yg@@QAE@XZ
?jsonParse@YGJsonObject@base@yg@@QAE_NPB_W0@Z
??4YGJsonHandle@base@yg@@QAEAAV012@H@Z
??AYGJsonHandle@base@yg@@QAE?AV012@PBD@Z
??1YGJsonHandle@base@yg@@QAE@XZ
??4YGJsonHandle@base@yg@@QAEAAV012@N@Z
?jsonWrite@YGJsonObject@base@yg@@QAE_NPAUIYGStringArgW@@@Z
?isInt@YGJsonHandle@base@yg@@QBE_NXZ
?toInt@YGJsonHandle@base@yg@@QBEHXZ
?isString@YGJsonHandle@base@yg@@QBE_NXZ
?toStringW@YGJsonHandle@base@yg@@QBEPB_WXZ
?isNull@YGJsonHandle@base@yg@@QBE_NXZ
?Utf8ToWString@YGCoder@base@yg@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?encode_to_md5@YGCoder@base@yg@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV45@@Z
?LoadFromString@YGXmlDocument@base@yg@@QAE_NPB_W@Z
?RootElement@YGXmlDocument@base@yg@@QBE?AVYGXmlElement@23@PB_W@Z
?FirstChildElement@YGXmlElement@base@yg@@QBE?AV123@PB_W@Z
?AttributeW@YGXmlElement@base@yg@@QBE_NPAUIYGStringArgW@@PBDPB_W@Z
?AttributeInt@YGXmlElement@base@yg@@QBEHPBDH@Z
??4YGJsonHandle@base@yg@@QAEAAV012@PB_W@Z
?SaveToFile@YGXmlDocument@base@yg@@QAE_NPB_W@Z
?SetAttribute@YGXmlElement@base@yg@@QAE_NPBD_J@Z
?CheckDirectoryExist@YGDirectory@base@yg@@SA_NPB_W@Z
?CreateAllDirectory@YGDirectory@base@yg@@SA_NPB_W@Z
?GetTemporaryFile@YGFile@base@yg@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??1YGDUIView@dui@yg@@QAE@XZ
??0YGSmartHttpClient@@QAE@XZ
?isValid@YGXmlNode@base@yg@@QBE_NXZ
GetModuleFileNameW
SetLastError
SetThreadContext
GetThreadContext
GetCurrentProcess
FlushInstructionCache
lstrlenA
GetSystemTimeAsFileTime
GetTickCount
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
HeapAlloc
GetProcessHeap
HeapFree
SetUnhandledExceptionFilter
WaitForSingleObject
ResumeThread
GetCurrentThreadId
InterlockedCompareExchange
VirtualQuery
GetCurrentThread
VirtualProtect
ResetEvent
CreateThread
Sleep
QueryPerformanceCounter
GetCurrentProcessId
QueryPerformanceFrequency
GlobalMemoryStatusEx
GetSystemTimes
SetEvent
GetEnvironmentVariableW
FreeLibrary
ReadFile
GetFileSize
CreateFileW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
RaiseException
DeleteFileA
CopyFileA
TerminateThread
SuspendThread
DeleteFileW
CloseHandle
GetLastError
CreateEventW
OutputDebugStringA
WideCharToMultiByte
lstrlenW
VirtualProtectEx
VirtualAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
IsWindow
SendMessageW
MoveWindow
ShowWindow
BringWindowToTop
SHGetSpecialFolderPathA
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoInitialize
CoSetProxyBlanket
SysAllocString
VariantClear
SysFreeString
PathFileExistsA
PathFileExistsW
PathRemoveFileSpecW
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
??_V@YAXPAX@Z
strcmp
memset
_purecall
memcpy
_wcsicmp
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
memmove_s
_atoi64
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
atoi
_time64
ceil
floor
_beginthreadex
strcat_s
_i64toa_s
memcpy_s
wcslen
wcsnlen
wcsstr
malloc
free
_snwprintf_s
swprintf_s
_wtoi64
vswprintf_s
_vscwprintf_p
wcscmp
strlen
vsprintf_s
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
_CxxThrowException
GetIfTable
DllCanUnloadNow
DllGetClassObject
YGPLugin_GetEntryPoints
YGPLugin_Initialize
YGPLugin_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ