Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a668e3b5173cbd6512f518fd7612983df308c7aea5a7ee56064edaf78165ac0c.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a668e3b5173cbd6512f518fd7612983df308c7aea5a7ee56064edaf78165ac0c.dll
Resource
win10v2004-20240508-en
Target
a668e3b5173cbd6512f518fd7612983df308c7aea5a7ee56064edaf78165ac0c
Size
115KB
MD5
562eace916f1cd7694ae7281d54df8ce
SHA1
8b8eb9512a5236ab94aa3b908e7b59c100f237fc
SHA256
a668e3b5173cbd6512f518fd7612983df308c7aea5a7ee56064edaf78165ac0c
SHA512
06ff3f2f561ae5e0bda6233f93ce32c04314c3a1e7f5dc895fe13736703939d6c419b6d3181fce09fea1a57076400d2527f115ad500716f5f70c64d35c10707f
SSDEEP
3072:vq68MqtTP4DnEZXP/n8jZ4gazyqs8ddmODbAi1aBr:5EJ38jUsGmODbd1ar
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
t:\imclient_pure\code\DuoyiIm\OUTPUT\imjson.pdb
GetLastError
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
?LogX@CSourceFilePos@@QAEXPB_WVCImObj@@1@Z
g_imCore
?SetInt@CImObj@@UAEXH@Z
?NewMember@CImOQuery@@UAE?AVCImObj@@XZ
?GetRefCount@IImObj@@UAEJXZ
?GetInt@CImObj@@UAEHXZ
?Buf@IImObj@@UAEAAVIImBuf@@XZ
?SetBool@CImObj@@UAEXH@Z
?IMap@IImObj@@UAEAAVIImIMap@@XZ
?_IsNotNull@IImObj@@UAEHXZ
?GetBool@CImObj@@UAEHXZ
?SMap@IImObj@@UAEAAVIImSMap@@XZ
?LogXA@CSourceFilePos@@QAEXPBDVCImObj@@1@Z
??0CImObj@@QAE@ABV0@@Z
?_SetNull@IImObj@@UAEXXZ
?NewObj@CImObj@@UAE?AV1@V1@@Z
?List@IImObj@@UAEAAVIImList@@XZ
?_GetType@CImOQuery@@UAE?AW4IMOBJTYPE@@XZ
?Copy@CImObj@@UAE?AV1@XZ
?Set@IImObj@@UAEAAVIImSet@@XZ
?_CopyObj@IImObj@@UAEPAV1@XZ
?_Uninit@CImOQuery@@UAEXXZ
?Clear@CImObj@@UAEXXZ
?IsDataEqual@CImObj@@UAEHV1@@Z
?AStr@IImObj@@UAEAAVIImAStr@@XZ
?_GetObjId@CImOQuery@@UAEKXZ
?DetachTo@CImObj@@UAEXAAV1@@Z
?_SetPyExt@IImObj@@UAEXPAX@Z
?IsEqual@CImObj@@UAEHV1@@Z
?WStr@IImObj@@UAEAAVIImWStr@@XZ
?SetObj@CImObj@@UAEXABV1@@Z
?GetMembersMap@CImOQuery@@UAE?AVCImObj@@XZ
?GetPyExt@CImObj@@UAEPAXXZ
?_ClearRefObj@CImOQuery@@UAEXPAVIImRef@@@Z
?_GetPyExt@IImObj@@UAEPAXXZ
?SetPtr@CImObj@@UAEXPAVIImObj@@H@Z
?SetPyExt@CImObj@@UAEXPAX@Z
?_MakeRefObj@CImOQuery@@UAEPAVIImRef@@XZ
?_GetExtPrintStr@CImOQuery@@UAE?AVCImObj@@XZ
??0CImObj@@QAE@XZ
?IsNotNull@CImObj@@UAEHXZ
?CallBack@CImObj@@UAE?AV1@PBDV1@@Z
?_IsDataEqual@CImOQuery@@UAEHPAVIImObj@@@Z
??0CImObj@@QAE@K@Z
?_GetPrePrintStr@CImOQuery@@UAE?AVCImObj@@XZ
?MakeRef@CImObj@@UAE?AV1@XZ
?Call_s@CImObj@@UAE?AV1@V1@0AAH@Z
g_strHelp
??1CSourceFilePos@@QAE@XZ
?GetKey@CImObj@@UAE?AV1@I@Z
?Call@CImObj@@UAE?AV1@IV1@AAH@Z
?_IsNull@CImOQuery@@UAEHXZ
??0CSourceFilePos@@QAE@PBDH0H@Z
?GetKey@CImObj@@UAE?AV1@PBD@Z
?NewFetch@CImObj@@UAE?AV1@XZ
??0CImObj@@QAE@PB_W@Z
?_Print@CImOQuery@@UAEHP6AXVCImObj@@0PAVCImObjPrintArg@@@Z01@Z
?SetKey@CImObj@@UAEXIV1@@Z
?Uninit@CImObj@@UAEXXZ
??0CImObj@@QAE@PBD@Z
?SetKey@CImObj@@UAEXPBDV1@@Z
?SetNull@CImObj@@UAEXXZ
?_NewObj@CImOQuery@@UAEPAVIImObj@@VCImObj@@@Z
?GetAStr@CImObj@@UAEPBDXZ
?IsNull@CImObj@@UAEHXZ
?_IsMatchKey@CImOQuery@@UAEHVCImObj@@I@Z
?SetAStr@CImObj@@UAEXPB_W@Z
?GetImObjType@CImObj@@UAE?AW4IMOBJTYPE@@XZ
??1CImObj@@QAE@XZ
?SetAStr@CImObj@@UAEXPBD@Z
?_UninitSubObj@CImOQuery@@UAEXXZ
?Set@CImObj@@UAEAAVIImSet@@XZ
?GetWStr@CImObj@@UAEPB_WXZ
?_ResetNull@CImOQuery@@UAEXXZ
?SetWStr@CImObj@@UAEXPB_W@Z
?List@CImObj@@UAEAAVIImList@@XZ
?SetWStr@CImObj@@UAEXPBD@Z
??0CImOQuery@@QAE@XZ
?_NewFetch@CImOQuery@@UAE?AVCImObj@@XZ
?SMap@CImObj@@UAEAAVIImSMap@@XZ
?GetUint64@CImObj@@UAE_KXZ
ImObj_GetNullWStr
?_Call@CImOQuery@@UAE?AVCImObj@@IV2@AAH@Z
?SetUint64@CImObj@@UAEX_K@Z
?IMap@CImObj@@UAEAAVIImIMap@@XZ
?_Query@CImOQuery@@UAEPAXI@Z
?GetInt64@CImObj@@UAE_JXZ
?_Call_s@CImOQuery@@UAE?AVCImObj@@V2@0AAH@Z
?Buf@CImObj@@UAEAAVIImBuf@@XZ
?SetInt64@CImObj@@UAEX_J@Z
?_QueryInterface@CImOQuery@@UAEPAXI@Z
?SetParam@CImObj@@UAEXJ@Z
?WStr@CImObj@@UAEAAVIImWStr@@XZ
ImObj_GenericClassId
?GetParam@CImObj@@UAEJXZ
?_CallBack@CImOQuery@@UAE?AVCImObj@@PBDV2@@Z
ImObj_GetNullAStr
?AStr@CImObj@@UAEAAVIImAStr@@XZ
?SetFloat@CImObj@@UAEXM@Z
?_InitCopy@CImOQuery@@UAEHVCImObj@@@Z
ImObj_Unlock
?GetFloat@CImObj@@UAEMXZ
?_Init@CImOQuery@@UAEHVCImObj@@@Z
?GetParamPtr@CImObj@@UAEPAXXZ
?_Release@IImObj@@UAEJXZ
?SetUint@CImObj@@UAEXI@Z
?_PrintMembers@CImOQuery@@UAEXP6AXVCImObj@@0PAVCImObjPrintArg@@@Z01@Z
?IsQueryClass@CImObj@@SAHPAVIImObj@@IH@Z
?SetParamPtr@CImObj@@UAEXPAX@Z
?GetUint@CImObj@@UAEIXZ
?_PrintDef@CImOQuery@@UAEXP6AXVCImObj@@0PAVCImObjPrintArg@@@Z01@Z
?_AddRef@IImObj@@UAEJXZ
ImObj_Lock
??BCImObj@@QAEPBDXZ
_CxxThrowException
__CxxFrameHandler3
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
sscanf
_purecall
strpbrk
sprintf_s
??_V@YAXPAX@Z
malloc
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
free
?what@exception@std@@UBEPBDXZ
modf
memmove_s
??_U@YAPAXI@Z
_invalid_parameter_noinfo
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
g_imJson
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ