Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a79c1b121f399be2ab18e0b9c32b6468f704e9559dc42c0a1b1d4c27b9e56705.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a79c1b121f399be2ab18e0b9c32b6468f704e9559dc42c0a1b1d4c27b9e56705.dll
Resource
win10v2004-20240508-en
Target
a79c1b121f399be2ab18e0b9c32b6468f704e9559dc42c0a1b1d4c27b9e56705
Size
584KB
MD5
2b0fcefc279561e921bc3f57df69ea7c
SHA1
306cdaf577ef5cb190cbd43a3342202584a2a4d4
SHA256
a79c1b121f399be2ab18e0b9c32b6468f704e9559dc42c0a1b1d4c27b9e56705
SHA512
c717277da6ab5f45c7bb64460423ae4222c8c7b8f83ba6b08fee5d734a21709911d0a464034b939b08a793c16d2b6f4d9651fed758cd65309aa39d945d6ee3a4
SSDEEP
12288:zaysBkPuFWKGgMV1EvSJxCeph0lhSMXlCkZwSx0Xx:OysBkPTV1Evs5h0lhSMXl7ZwSx0
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\BUILD\work\3ec84b7238d5b18a\BUILDS\Release\x86\event_manager_burger.pdb
?Add@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@XZ
?Get@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?Clear@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEXXZ
??1?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@XZ
?size@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QBEHXZ
?MergeFrom@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEXABV123@@Z
?WriteString@WireFormatLite@internal@protobuf@google@@SAXHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVCodedOutputStream@io@34@@Z
?DecrementRecursionDepthAndPopLimit@CodedInputStream@io@protobuf@google@@QAE_NH@Z
?ShutdownProtobufLibrary@protobuf@google@@YAXXZ
?IncrementRecursionDepthAndPushLimit@CodedInputStream@io@protobuf@google@@QAE?AU?$pair@HH@std@@H@Z
?ReadVarintSizeAsIntFallback@CodedInputStream@io@protobuf@google@@AAEHXZ
?WriteMessage@WireFormatLite@internal@protobuf@google@@SAXHABVMessageLite@34@PAVCodedOutputStream@io@34@@Z
?WriteInt64@WireFormatLite@internal@protobuf@google@@SAXH_JPAVCodedOutputStream@io@34@@Z
?WriteRaw@CodedOutputStream@io@protobuf@google@@QAEXPBXH@Z
?WriteBool@WireFormatLite@internal@protobuf@google@@SAXH_NPAVCodedOutputStream@io@34@@Z
?WriteStringMaybeAliased@WireFormatLite@internal@protobuf@google@@SAXHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVCodedOutputStream@io@34@@Z
?WriteEnum@WireFormatLite@internal@protobuf@google@@SAXHHPAVCodedOutputStream@io@34@@Z
?WriteInt32@WireFormatLite@internal@protobuf@google@@SAXHHPAVCodedOutputStream@io@34@@Z
?WriteAliasedRaw@ZeroCopyOutputStream@io@protobuf@google@@UAE_NPBXH@Z
?SkipField@WireFormatLite@internal@protobuf@google@@SA_NPAVCodedInputStream@io@34@IPAVCodedOutputStream@634@@Z
?ReadVarint64Fallback@CodedInputStream@io@protobuf@google@@AAE?AU?$pair@_K_N@std@@XZ
?ReadBytes@WireFormatLite@internal@protobuf@google@@SA_NPAVCodedInputStream@io@34@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?WriteVarint32SlowPath@CodedOutputStream@io@protobuf@google@@AAEXI@Z
?ReadVarint32Fallback@CodedInputStream@io@protobuf@google@@AAE_JI@Z
?ReadTagFallback@CodedInputStream@io@protobuf@google@@AAEII@Z
??1CodedOutputStream@io@protobuf@google@@QAE@XZ
??0CodedOutputStream@io@protobuf@google@@QAE@PAVZeroCopyOutputStream@123@_N@Z
??0StringOutputStream@io@protobuf@google@@QAE@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?InitSCCImpl@internal@protobuf@google@@YAXPAUSCCInfoBase@123@@Z
?New@MessageLite@protobuf@google@@UBEPAV123@PAVArena@23@@Z
?InitializationErrorString@MessageLite@protobuf@google@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?SerializeWithCachedSizes@MessageLite@protobuf@google@@UBEXPAVCodedOutputStream@io@23@@Z
?SerializeWithCachedSizesToArray@MessageLite@protobuf@google@@UBEPAEPAE@Z
?InternalSerializeWithCachedSizesToArray@MessageLite@protobuf@google@@UBEPAEPAE@Z
?InitProtobufDefaults@internal@protobuf@google@@YAXXZ
?OnShutdownRun@internal@protobuf@google@@YAXP6AXPBX@Z0@Z
?DestroyMessage@internal@protobuf@google@@YAXPBX@Z
?VerifyVersion@internal@protobuf@google@@YAXHHPBD@Z
?OnArenaAllocation@Arena@protobuf@google@@ABEXPBVtype_info@@I@Z
?AllocateAlignedAndAddCleanup@ArenaImpl@internal@protobuf@google@@QAEPAXIP6AXPAX@Z@Z
?ParseFromArray@MessageLite@protobuf@google@@QAE_NPBXH@Z
?GetModuleLifetimeDll@mi@asw@@YA?AV?$shared_ptr@VIModuleLifetime@mi@asw@@@std@@XZ
?free_dll@dll_loader@asw@@YA_NPAUHINSTANCE__@@@Z
?load_dll@dll_loader@asw@@YAPAUHINSTANCE__@@PB_W0@Z
NtSetInformationThread
InitOnceBeginInitialize
InitOnceComplete
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
OutputDebugStringW
GetCurrentProcessId
FindVolumeClose
GetVolumePathNamesForVolumeNameW
FindNextVolumeW
QueryDosDeviceW
FindFirstVolumeW
MultiByteToWideChar
GetLastError
LoadLibraryA
GetProcAddress
GetModuleHandleW
LoadLibraryExW
GetModuleHandleExW
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
ResetEvent
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
WideCharToMultiByte
GetProcessHeap
GetModuleFileNameA
InitializeCriticalSectionEx
GetCurrentThreadId
SetEvent
GetThreadPriority
GetCurrentThread
GetCurrentProcess
LocalFree
RaiseException
GetThreadTimes
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
SetThreadPriority
CompareStringW
QueryPerformanceFrequency
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryThreadCycleTime
FreeLibrary
GetSystemDirectoryW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
K32GetMappedFileNameW
GetModuleFileNameW
GetWindowsDirectoryW
SetLastError
GetTokenInformation
OpenProcessToken
EqualSid
RevertToSelf
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
OpenThreadToken
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?uncaught_exceptions@std@@YAHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
?id@?$ctype@_W@std@@2V0locale@2@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?good@ios_base@std@@QBE_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
_Mbrtowc
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?classic@locale@std@@SAABV12@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPBD@Z
_Mtx_destroy_in_situ
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_lock
_Mtx_init_in_situ
_Mtx_unlock
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEDD@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
__std_atomic_notify_all_direct
__std_atomic_wait_direct
memcpy
memchr
__RTDynamicCast
__CxxFrameHandler3
memmove
_CxxThrowException
memset
__current_exception_context
__current_exception
__std_type_info_destroy_list
_except_handler4_common
__RTtypeid
__std_type_info_name
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
calloc
free
malloc
_callnewh
_dclass
_fdclass
_ldsign
_fdsign
_dsign
_ldclass
abort
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm
_initterm_e
wcstoul
isdigit
wcsncmp
wcscat_s
_wcsnicmp
SHGetFolderPathW
?CreateEventManagerBurgerModule@detail@burger@event_manager@asw@@YA?AV?$shared_ptr@VIModule@burger@event_manager@asw@@@std@@XZ
?GetModuleLifetimeObject@detail@burger@event_manager@asw@@YA?AV?$shared_ptr@VIModuleLifetime@mi@asw@@@std@@XZ
CreateEventManagerBurgerModuleRaw
on_avast_dll_unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ