Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a6d578e55a6266e7fd90dc460c17644268ebe10469ea7df7215b5724650f6f9c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a6d578e55a6266e7fd90dc460c17644268ebe10469ea7df7215b5724650f6f9c.exe
Resource
win10v2004-20240419-en
Target
a6d578e55a6266e7fd90dc460c17644268ebe10469ea7df7215b5724650f6f9c
Size
106KB
MD5
9c09fa912f13b02e0266979556479564
SHA1
889f363be0fb93f093d3ac9bb690a99d0afa6276
SHA256
a6d578e55a6266e7fd90dc460c17644268ebe10469ea7df7215b5724650f6f9c
SHA512
a276d6e93602dd5a540f31f49d96441ad836f0934d79ca98047ada5430d0693f97ea7367e5cd2cc35ea5668cc7c87ca8193d9948d869541a964fbe4b00bf5db5
SSDEEP
1536:6seoynFrIp1Q4tRouSVxFR5CvT0xRv3OIDiJD3xlfyswzXaEDRzLxw:0IRHoueR5KIx9+IeJDBlf4awLy
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
d:\Projects\Thunders_kankanlite\DownloadService\DownloadServer\Release\ThunderServiceLite.pdb
PathAddBackslashA
PathRemoveExtensionA
PathFindExtensionA
PathAppendA
PathFileExistsA
PathFindExtensionW
PathIsDirectoryA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
ExecutionLiveUpdateFile
ExitProcess
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
CreateDirectoryA
GetModuleFileNameA
GetLocalTime
GetProcAddress
LoadLibraryA
GetModuleFileNameW
SetUnhandledExceptionFilter
LoadLibraryW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
FreeLibrary
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
GetLastError
WideCharToMultiByte
lstrlenW
GetCurrentDirectoryA
GetStartupInfoA
SetCurrentDirectoryA
lstrcmpiA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
DeleteFileA
GetTempPathA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
CreateEventA
CreateMutexA
GetCommandLineA
Process32Next
Module32Next
Module32First
Process32First
CreateToolhelp32Snapshot
LocalFree
LocalAlloc
SetFileAttributesA
GetFileAttributesA
QueryPerformanceCounter
GetSystemTimeAsFileTime
OutputDebugStringA
DispatchMessageA
CharNextA
GetMessageA
SetTimer
KillTimer
CreateDialogParamA
DestroyWindow
SendMessageTimeoutA
IsWindow
PostMessageA
MessageBoxW
OpenProcessToken
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
CoRevokeClassObject
CoTaskMemRealloc
CoRegisterClassObject
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemFree
VariantInit
VarBstrCmp
VarBstrCat
SafeArrayDestroy
SysStringByteLen
SysAllocStringByteLen
SafeArrayGetUBound
SysStringLen
VariantClear
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?_Nomemory@std@@YAXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
_wcsnicmp
_except_handler3
free
??3@YAXPAX@Z
strlen
_CxxThrowException
malloc
_snprintf
memcmp
_resetstkoflw
_purecall
wcsncpy
realloc
fclose
fprintf
fopen
_putenv
_mbsicmp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
wcslen
wcscpy
isalnum
memmove
_atoi64
_ftime64
vfprintf
wcscmp
_callnewh
__security_error_handler
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_wcsicmp
strcat
sprintf
??_V@YAXPAX@Z
memcpy
swprintf
__CxxFrameHandler
memset
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE