Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b3ba94c77fe4a7de98e84b8b2df56605544b214f5142d261a65766ca2833f728.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b3ba94c77fe4a7de98e84b8b2df56605544b214f5142d261a65766ca2833f728.dll
Resource
win10v2004-20240226-en
Target
b3ba94c77fe4a7de98e84b8b2df56605544b214f5142d261a65766ca2833f728
Size
262KB
MD5
f822ccba9b319a7692355f519f27aa95
SHA1
aa43f209a45befb50a96b2f2e6eb783253916009
SHA256
b3ba94c77fe4a7de98e84b8b2df56605544b214f5142d261a65766ca2833f728
SHA512
66844e12252ea86c68f5017c26e50431618de15cd5a06327f0422233e041e21dd92d4ee2dc41dc12a1ae6401c594dbb7bd65ae9481e2d0f2a92bb4630debc631
SSDEEP
6144:6uvYqDUnL0QjDWJnnNtA0xBaQ9L8LWiX0pvQJ:xG0QaNXaQa1J
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\gl\builds\cfx-fivem\beta\fivem.inter-build-cache\bin\five\release\dbg\citizen-mod-loader-five.pdb
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetProcAddress
GetCommandLineW
CloseHandle
GetLastError
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
RtlCaptureContext
GetModuleFileNameW
ExitProcess
GetFullPathNameW
GetFileAttributesW
CreateDirectoryW
InitializeSListHead
??1Device@vfs@@UEAA@XZ
?OpenArchive@RagePackfile7@vfs@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??1RagePackfile7@vfs@@UEAA@XZ
??0RagePackfile7@vfs@@QEAA@XZ
?Mount@vfs@@YAXV?$fwRefContainer@VDevice@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?OpenRead@vfs@@YA?AV?$fwRefContainer@VStream@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ReadToEnd@Stream@vfs@@QEAA?AV?$vector@EV?$allocator@E@std@@@std@@XZ
?Open@RagePackfile7@vfs@@UEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?OpenBulk@RagePackfile7@vfs@@UEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEA_K@Z
?Create@Device@vfs@@UEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Read@RagePackfile7@vfs@@UEAA_K_KPEAX0@Z
?ReadBulk@RagePackfile7@vfs@@UEAA_K_K0PEAX0@Z
?Write@Device@vfs@@UEAA_K_KPEBX0@Z
?WriteBulk@Device@vfs@@UEAA_K_K0PEBX0@Z
?Seek@RagePackfile7@vfs@@UEAA_K_K_JH@Z
?Close@RagePackfile7@vfs@@UEAA_N_K@Z
?CloseBulk@RagePackfile7@vfs@@UEAA_N_K@Z
?RemoveFile@Device@vfs@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RenameFile@Device@vfs@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?CreateDirectoryW@Device@vfs@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RemoveDirectoryW@Device@vfs@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetAttributes@Device@vfs@@UEAAIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLength@RagePackfile7@vfs@@UEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLength@RagePackfile7@vfs@@UEAA_K_K@Z
?GetModifiedTime@Device@vfs@@UEAA_JAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?FindFirst@RagePackfile7@vfs@@UEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAUFindData@2@@Z
?FindNext@RagePackfile7@vfs@@UEAA_N_KPEAUFindData@2@@Z
?FindClose@RagePackfile7@vfs@@UEAAX_K@Z
?SetPathPrefix@RagePackfile7@vfs@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ExtensionCtl@RagePackfile7@vfs@@UEAA_NHPEAX_K@Z
?Unmount@vfs@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetDevice@vfs@@YA?AV?$fwRefContainer@VDevice@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Device@vfs@@QEAA@XZ
??3sysUseAllocator@rage@@SAXPEAX@Z
??2sysUseAllocator@rage@@SAPEAX_K@Z
?GetDevice@fiDevice@rage@@SAPEAV12@PEBD_N@Z
?OnInitialMount@fiDevice@rage@@2V?$fwEvent@$$V@@A
??0fiDeviceRelative@rage@@QEAA@XZ
?Mount@fiDeviceRelative@rage@@QEAAXPEBD@Z
?SetPath@fiDeviceRelative@rage@@QEAAXPEBDPEAVfiDevice@2@_N@Z
?OnPostFrontendRender@@3V?$fwEvent@$$V@@A
?GetGameResolution@@YAXAEAH0@Z
?AddDataFileToLoadList@streaming@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?CfxCollection_AddStreamingFileByTag@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0UResourceFlags@rage@@@Z
?TheFonts@@3PEAVFontRenderer@@EA
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
__CxxFrameHandler3
memchr
memcpy
memmove
memset
__std_terminate
__std_exception_destroy
memcmp
wcsrchr
strchr
__std_exception_copy
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
_CxxThrowException
wcsstr
_purecall
__CxxFrameHandler4
_execute_onexit_table
_register_onexit_function
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
terminate
_crt_atexit
_initialize_onexit_table
_errno
__acrt_iob_func
fwrite
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
_wfopen
fclose
__stdio_common_vfprintf
setvbuf
malloc
_callnewh
free
calloc
_fdsign
_ldsign
_dsign
_fdclass
_ldclass
_dclass
isspace
isalpha
wcscpy_s
strcmp
_stricmp
strncmp
isdigit
strtol
_wtoi
getenv
localeconv
CreateComponent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ