Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
20240516_2303_1080.dll
Resource
win10-20240404-en
Target
20240516_2303_1080.jpg
Size
91KB
MD5
7f577faa9335a69f2f9163380fafa63d
SHA1
134025e6b64c0f582dd219cad4b51e8a32ad0b2f
SHA256
f6bb871247df27b51d51f3b09a782e86f9fd4262401bdea47272a519aa88dbbe
SHA512
d4166cf033f2f0b4d9e6beec5f567567eee32b065550d87b7298979aaed407d8404c30ab6ee3f5ee011f82f20cc090118906eadc232252993fdce5b22d566eb4
SSDEEP
1536:SZCmghcE0Fz6itq9jf99B82A1DbwZqmsbfH+rzz9CS1A7HxO:Maj0ht4f9H8JwZrsTHK9Chg
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\data\devops\p-8e4773b1cc924d9da948a826be9e3252\win\out\Release\HotPatchDll.pdb
??0CDuiString@DuiLib@@QAE@ABV01@@Z
??0CDuiString@DuiLib@@QAE@PB_WH@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
??1CDuiString@DuiLib@@QAE@XZ
ImageDirectoryEntryToDataEx
GetModuleHandleW
FormatMessageA
FormatMessageW
WideCharToMultiByte
LocalFree
TlsAlloc
GetLastError
CloseHandle
SetEvent
CreateEventA
TlsFree
HeapFree
InitializeCriticalSectionEx
DeleteCriticalSection
GetProcessHeap
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
LoadLibraryExA
IsDebuggerPresent
OutputDebugStringW
InitOnceBeginInitialize
InitOnceComplete
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
ResetEvent
WaitForSingleObjectEx
OpenEventA
TlsGetValue
TlsSetValue
GetProcAddress
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_function_call@std@@YAXXZ
_Mtx_destroy_in_situ
_Mtx_init_in_situ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?good@ios_base@std@@QBE_NXZ
?uncaught_exceptions@std@@YAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
WSACleanup
WSAStartup
_CxxThrowException
__current_exception_context
__current_exception
memset
_except_handler4_common
_purecall
__std_exception_destroy
__std_exception_copy
__std_terminate
__CxxFrameHandler3
__std_type_info_destroy_list
memcpy
memmove
_stricmp
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_cexit
_seh_filter_dll
_initterm
_initterm_e
_configure_narrow_argv
abort
_invalid_parameter_noinfo_noreturn
terminate
__stdio_common_vsprintf
free
malloc
_callnewh
??0?$_Ptr_base@VImage@Gdiplus@@@std@@IAE@XZ
??0?$shared_ptr@VImage@Gdiplus@@@std@@QAE@$$QAV01@@Z
??0?$shared_ptr@VImage@Gdiplus@@@std@@QAE@$$T@Z
??0?$shared_ptr@VImage@Gdiplus@@@std@@QAE@ABV01@@Z
??0?$shared_ptr@VImage@Gdiplus@@@std@@QAE@XZ
??1?$_Ptr_base@VImage@Gdiplus@@@std@@IAE@XZ
??1?$shared_ptr@VImage@Gdiplus@@@std@@QAE@XZ
??4?$shared_ptr@VImage@Gdiplus@@@std@@QAEAAV01@$$QAV01@@Z
??4?$shared_ptr@VImage@Gdiplus@@@std@@QAEAAV01@ABV01@@Z
??B?$shared_ptr@VImage@Gdiplus@@@std@@QBE_NXZ
?_Decref@?$_Ptr_base@VImage@Gdiplus@@@std@@IAEXXZ
?_Decwref@?$_Ptr_base@VImage@Gdiplus@@@std@@IAEXXZ
?_Incref@?$_Ptr_base@VImage@Gdiplus@@@std@@IBEXXZ
?_Incwref@?$_Ptr_base@VImage@Gdiplus@@@std@@IBEXXZ
?_Set_ptr_rep_and_enable_shared@?$shared_ptr@VImage@Gdiplus@@@std@@AAEX$$TQAV_Ref_count_base@2@@Z
?_Swap@?$_Ptr_base@VImage@Gdiplus@@@std@@IAEXAAV12@@Z
?__autoclassinit2@?$_Ptr_base@VImage@Gdiplus@@@std@@QAEXI@Z
?__autoclassinit2@?$shared_ptr@VImage@Gdiplus@@@std@@QAEXI@Z
?get@?$_Ptr_base@VImage@Gdiplus@@@std@@IBEPAVImage@Gdiplus@@XZ
?reset@?$shared_ptr@VImage@Gdiplus@@@std@@QAEXXZ
?swap@?$shared_ptr@VImage@Gdiplus@@@std@@QAEXAAV12@@Z
?use_count@?$_Ptr_base@VImage@Gdiplus@@@std@@QBEJXZ
GetPatchInfo
HP_OnState
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ