Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
orcl.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
orcl.dll
Resource
win10v2004-20240426-en
Target
orcl.dll
Size
707KB
MD5
15cb9f270e1135db849641648de53c66
SHA1
0b805abb2ab87bb82ba7604c2a3af14359788ea8
SHA256
05d01ccc7cc7443fe437c98daf296e59daa6bdd81fa0438179d88cb633fe23c6
SHA512
42e2c54783b254b1be8e579b0b772e3778daa689ad514d66556394daad1079334b0f2059d27a3e810e5b8ddfa4d44ac7f9e63885ba4b09b7cc7f112784459cd2
SSDEEP
6144:BC/n8mTINVCSu5D20CKN9M8y4533C8OKHkf9Kt4Y:BC/nr8f2N2JS9dy45i4T
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\Jenkins\ci_builder\WindowsBuild2_5B9Y8LMQO8F2\Platform\src\BUILD64\BIN\orcl.pdb
?getCurrentDate@Date@core@@SA?AV12@XZ
??0URL@core@@QEAA@AEBV01@@Z
?string_uito@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@IH@Z
?current_ecxeptions_count@core@@YAPEAVExceptionsCount@1@XZ
?get_milliseconds@core@@YAIXZ
?long_time_callback@core@@YAXXZ
?kAllFilesMaskWindows@core@@3QB_SB
?kAllFilesMaskLinux@core@@3QB_SB
?copy_file@core@@YA_KPEAVIFile@1@0_K@Z
?string_lto@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@JAEAV23@H@Z
??0FileException@core@@QEAA@W4Error@01@PEB_SIAEBVURL@1@PEAVIExceptionObject@1@@Z
?string_tokenize@core@@YA?AV?$vector@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@V?$allocator@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@std@@@std@@PEB_S000@Z
??0IllegalStateException@core@@QEAA@AEBV01@@Z
??1IllegalStateException@core@@QEAA@XZ
?string_tol@core@@YAJPEB_SPEAPEB_S@Z
??0Exception@core@@IEAA@AEBU_GUID@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@1@Z
?compare@core@@YAHPEB_S_K01@Z
?get@ListInStream@core@@QEAAXAEAVNumeric@2@@Z
?string_cpy@core@@YAPEA_SPEA_SPEB_S@Z
?toString@Date@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?hex_bin@core@@YA_NPEB_S_KAEAV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@@Z
?create_temp_file@core@@YA?AV?$InterfacePtr@VIFileEx@core@@@1@_K@Z
?put@ListOutStream@core@@QEAAXPEB_S_K@Z
?put@ListOutStream@core@@QEAAXAEBVNumeric@2@@Z
?fromString@Date@core@@QEAAAEAV12@PEB_SPEAPEB_S@Z
??0IllegalStateException@core@@QEAA@PEBDIPEB_SPEAVIExceptionObject@1@@Z
?xdigit@core@@YAH_S@Z
?skip_spaces@core@@YAXPEAVIReader@1@@Z
?for_xdigit@core@@YADI@Z
?from_stream@core@@YA_NPEAVIReader@1@AEAI@Z
?to_stream@core@@YAXPEAVIWriter@1@I@Z
??1SCOM_ResourceBundle@core@@QEAA@XZ
??0SCOM_ResourceBundle@core@@QEAA@PEBD@Z
?revokeAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?registerAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?cleanup@SCOM_ResourceBundle@core@@QEAAXXZ
?cleanup@SCOM_Module@core@@QEAAXXZ
?initialize@SCOM_Module@core@@QEAAXXZ
??0Date@core@@QEAA@HHHHHH@Z
?toStream@Date@core@@QEBAXPEAVIWriter@2@@Z
?fromStream@Date@core@@QEAA_NPEAVIReader@2@@Z
?toBinary@Date@core@@QEBAXPEAVIListOutStream@2@@Z
?fromBinary@Date@core@@QEAAXPEAVIListInStream@2@@Z
?bin_hex@core@@YAXHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?bin_hex@core@@YAXAEBV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@AEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@3@@Z
?compare_nocase@core@@YAHPEB_S_K01@Z
??0Numeric@core@@QEAA@_K@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?to_upper@core@@YA_S_S@Z
?for_digit@core@@YADI@Z
?split@Date@core@@QEBAXAEAH00000@Z
?bin_hex@core@@YAXPEBD_KAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?digits@Numeric@core@@QEBAXPEADI@Z
?string_uito@core@@YAPEA_SIPEA_SH@Z
??BNumeric@core@@QEBAJXZ
?put@ListOutStream@core@@QEAAXJ@Z
?string_uito@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@IAEAV23@H@Z
?get@ListInStream@core@@QEAAXAEAJ@Z
?normalize@URL@core@@QEBA?AV12@XZ
??0Numeric@core@@QEAA@AEBV01@@Z
??0Numeric@core@@QEAA@J@Z
?object@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?filePath@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?empty_string@core@@YAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?get@ListInStream@core@@QEAAXAEA_J@Z
?string_printf@core@@YAHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_SZZ
?string_ito@core@@YAPEA_SHPEA_SH@Z
?string_len@core@@YA_KPEB_S@Z
?string_ito@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@HAEAV23@H@Z
?fromString@Numeric@core@@QEAAAEAV12@PEB_SPEAPEB_S@Z
?toString@Numeric@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?get@ListInStream@core@@QEAAXAEA_N@Z
?getComma@ListInStream@core@@QEAA_NXZ
?get@ListInStream@core@@QEAAXAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?put@ListOutStream@core@@QEAAXH@Z
?put@ListOutStream@core@@QEAAX_N@Z
?getEndOfList@ListInStream@core@@QEAAXXZ
?getBeginOfList@ListInStream@core@@QEAAXXZ
?putEndOfList@ListOutStream@core@@QEAAXXZ
?putBeginOfList@ListOutStream@core@@QEAAXXZ
?is_space@core@@YA_N_S@Z
??0URL@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
??1URL@core@@QEAA@XZ
?unlock@IMutexImpl@core@@UEAAXXZ
?lock@IMutexImpl@core@@UEAAXXZ
?current_process@core@@YAPEAVSCOM_Process@1@XZ
??0IMutexImpl@core@@QEAA@XZ
?replace_all@core@@YA_KAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@1@Z
?compare@Numeric@core@@QEBAHAEBV12@@Z
??0Numeric@core@@QEAA@H@Z
?to_upper@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_S0@Z
??1IMutexImpl@core@@QEAA@XZ
?load_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVSCOM_ResourceBundle@1@PEBD@Z
??1Numeric@core@@QEAA@XZ
??0Numeric@core@@QEAA@XZ
??0Exception@core@@QEAA@AEBV01@@Z
??1Exception@core@@QEAA@XZ
?kUUIDNull@core@@3U_GUID@@B
??0FileException@core@@QEAA@W4Error@01@PEB_SIAEBVURL@1@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??0ObStack@nuke@@QEAA@PEAVBufferPool@1@@Z
?buffer_pools@nuke@@YAPEAVBufferPools@1@XZ
??1ObStack@nuke@@QEAA@XZ
?alloc@ObStack@nuke@@QEAAPEAX_K@Z
?nuke_new@@YAPEAX_K@Z
?nuke_delete_size@@YAXPEAX_K@Z
?nuke_delete@@YAXPEAX@Z
?nuke_new_nothrow@@YAPEAX_K@Z
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
SetEnvironmentVariableW
FreeLibrary
GetProcAddress
IsProcessorFeaturePresent
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
LoadLibraryW
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
OutputDebugStringW
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
lstrcmpiW
IsDebuggerPresent
CharNextW
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
?_Xlength_error@std@@YAXPEBD@Z
__CxxFrameHandler3
memcpy
__std_exception_copy
__std_exception_destroy
_purecall
wcsstr
memcmp
memmove
memset
__C_specific_handler
__std_type_info_destroy_list
__std_terminate
_CxxThrowException
_recalloc
malloc
free
_seh_filter_dll
_configure_narrow_argv
_invalid_parameter_noinfo
_errno
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
wcsncpy_s
SCOM_Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ