Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
17ac43a00c0317288ce8698f7a5440a63f6e9442b24781741b65cd4806d35db2.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17ac43a00c0317288ce8698f7a5440a63f6e9442b24781741b65cd4806d35db2.dll
Resource
win10v2004-20240611-en
Target
17ac43a00c0317288ce8698f7a5440a63f6e9442b24781741b65cd4806d35db2
Size
32KB
MD5
ac0bed9134bb57bbfa19ffbdb12ff8d4
SHA1
7ac96ba7cb782e26c3b39a46d9e93f4a79f7eab9
SHA256
17ac43a00c0317288ce8698f7a5440a63f6e9442b24781741b65cd4806d35db2
SHA512
300ac927070c5a307a573d8325795a671dd655954ec4449385656d2979f0d21fa776bdedaebbd1f61a1c82eece5cf3516c61f9756275f363e623d4294858eaad
SSDEEP
768:/foWwb7vw3Zaj2D4oQTXMq7if2TfJZNmE:/foWwb7veZaj2Dnq7ie1
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\develop\whatapps\whats_trunk\WhatsappManager\build\x86\lib\release\AndDecrypt.pdb
Log
inflate
inflateEnd
inflateInit2_
HMAC_Init_ex
HMAC_CTX_free
HMAC_CTX_new
EVP_get_digestbyname
HMAC_Update
HMAC_Final
?decrypt_aes_gcm@@YAHAAVQIODevice@@_JAAVQByteArray@@2ABVQString@@@Z
??1QFile@@UAE@XZ
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QByteArray@@QAE@XZ
??1QByteArray@@QAE@XZ
?constData@QByteArray@@QBEPBDXZ
??0QString@@QAE@ABV0@@Z
??1QString@@QAE@XZ
?append@QString@@QAEAAV1@ABV1@@Z
?fromUtf8@QString@@SA?AV1@PBDH@Z
?read@QIODevice@@QAE?AVQByteArray@@_J@Z
?remove@QFile@@SA_NABVQString@@@Z
??0QFileInfo@@QAE@ABVQString@@@Z
??1QFileInfo@@QAE@XZ
?exists@QFileInfo@@QBE_NXZ
?size@QFileInfo@@QBE_JXZ
??0QFile@@QAE@ABVQString@@@Z
?data@QByteArray@@QAEPADXZ
??4QByteArray@@QAEAAV0@$$QAV0@@Z
?fromHex@QByteArray@@SA?AV1@ABV1@@Z
??9QString@@QBE_NABVQByteArray@@@Z
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
?write@QIODevice@@QAE_JPBD_J@Z
?atEnd@QFileDevice@@UBE_NXZ
?indexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z
??8QString@@QBE_NPBD@Z
?exists@QFileInfo@@SA_NABVQString@@@Z
?fileName@QFileInfo@@QBE?AVQString@@XZ
?suffix@QFileInfo@@QBE?AVQString@@XZ
?seek@QFileDevice@@UAE_N_J@Z
?close@QFileDevice@@UAEXXZ
?resize@QByteArray@@QAEXH@Z
?read@QIODevice@@QAE_JPAD_J@Z
?toLocal8Bit@QString@@QGBE?AVQByteArray@@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
memcpy
memmove
memset
_CxxThrowException
_except_handler4_common
__CxxFrameHandler3
__std_type_info_destroy_list
__std_exception_copy
__std_exception_destroy
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_execute_onexit_table
_cexit
_initterm
_initterm_e
_configure_narrow_argv
_errno
_invalid_parameter_noinfo_noreturn
strtoul
free
_callnewh
malloc
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
??4AndDecrypt@@QAEAAV0@$$QAV0@@Z
??4AndDecrypt@@QAEAAV0@ABV0@@Z
?Decrypt@AndDecrypt@@SA_NABVQString@@00@Z
?NeedDecrypt@AndDecrypt@@SA_NABVQString@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ