Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
2b97a6c6d25bb7fdf778e2f4579ef080N.exe
Behavioral task
behavioral2
Sample
2b97a6c6d25bb7fdf778e2f4579ef080N.exe
Target
2b97a6c6d25bb7fdf778e2f4579ef080N.exe
Size
134KB
MD5
2b97a6c6d25bb7fdf778e2f4579ef080
SHA1
f71689b36cb46d1290a5cc3be99c4b5907a99dfd
SHA256
d866a9da639b8b4d4da47b3323a8ad664931254f10c63cf3b60347a2587beed3
SHA512
70dbb6abecc499c6bcc9cbc89e5d668ae4cd66ae423c9da1e99c16482634ec548c6ddca79c18b247b1a4cc5a998eec34cec6f685ac773c2be68df9d50b25df73
SSDEEP
3072:C0nYXjXgSvovdPe4NOEvw+rD0J35hJ0nYXjXgSvovdPeE:CAYDZAlfvwgDeLAYDZAD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\a\_work\1\s\\binaries\amd64ret\bin\amd64\pgomgr.pdb
FindFirstFileW
FindNextFileW
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
FormatMessageW
LocalFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingW
CloseHandle
GetFileSize
CreateFileW
SetLastError
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
WideCharToMultiByte
WriteFile
GetFileType
GetUserDefaultUILanguage
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleFileNameW
FindResourceExW
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
DecodePointer
EncodePointer
TerminateProcess
__CxxFrameHandler4
__current_exception_context
__current_exception
__C_specific_handler
__unDNameEx
memset
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
wcschr
_CxxThrowException
memmove
wcsrchr
memcpy
_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___wargv
__p___argc
_register_onexit_function
_exit
_initterm_e
_initterm
_get_initial_wide_environment
_errno
_configure_wide_argv
_set_app_type
_seh_filter_exe
exit
terminate
_initialize_onexit_table
_initialize_wide_environment
_invalid_parameter_noinfo_noreturn
_set_new_mode
free
calloc
_callnewh
malloc
_fileno
__stdio_common_vsnwprintf_s
__stdio_common_vswscanf
__acrt_iob_func
fclose
_wfopen_s
__stdio_common_vswprintf_s
_get_osfhandle
fflush
_set_fmode
__p__commode
fputs
wcstok_s
_wcsdup
_wcsicmp
wcscmp
wcsncat_s
wcsncpy_s
_wcsnicmp
wcscpy_s
wcscat_s
_waccess_s
_wsplitpath_s
wcstoul
_itow_s
_wtoi64
wcstol
qsort
__setusermatherr
_configthreadlocale
?_Xlength_error@std@@YAXPEBD@Z
?GetErrorText@PogoDbUtil@@SAPEBGW4POGODB_ERROR@@@Z
?FormatTime_s@PogoDbUtil@@SAHPEB_KPEAD_K@Z
PogoDbStreamNames
?GetMachineAttributes@PogoDbUtil@@SAPEAUtagPGDMACHINEATTR@@K@Z
?NewPgdObject@PogoDbUtil@@SAPEAVPogoDbInterface@@XZ
?DeletePgdObject@PogoDbUtil@@SAPEAVPogoDbInterface@@PEAV2@@Z
?FreeMemory@PogoDbUtil@@SAXPEAX@Z
_wdupenv_s
_cputws
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ