Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Program Files (x86)/WanNengInput/WnPYSkinPreview.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Program Files (x86)/WanNengInput/WnPYSkinPreview.dll
Resource
win10v2004-20240709-en
Target
7a2a33d544a3f1d91ce2fe7c6b7437a639c8fea39610c2abb822cbcdc929d394
Size
860KB
MD5
48d04fc6d7dbca3fbd06c29f88018b8f
SHA1
4b9dd49d1bcafc24327e5d555938bcf0f9821e00
SHA256
7a2a33d544a3f1d91ce2fe7c6b7437a639c8fea39610c2abb822cbcdc929d394
SHA512
cb0055a61ed0570838a7c176e2f5c946b18e8576707d5e1ada8d06d9e04e3ff42a9e53d801e031d7b3d2de89a48806b613fa2add33ef80ee1a1550e6d1ed378f
SSDEEP
12288:VSaJUk0nNGLWXiEW8+C7OwcP2dqefLbYgVeQdOZXdpfhMpO77JSUO4t9OXW37Gul:VonsvVQ7wP2kUbtVnY3YyVviWLGuUY
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LCMapStringW
GetLocalTime
lstrcpyW
AreFileApisANSI
RaiseException
DecodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapDestroy
HeapReAlloc
HeapSize
WriteFile
TerminateProcess
GetPrivateProfileStringA
CreateFileA
SetFilePointerEx
SetEndOfFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
DeleteFileA
TerminateThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
OutputDebugStringW
FindResourceExW
OpenFileMappingW
FormatMessageA
LoadLibraryA
GetTempPathA
GetFileAttributesA
UnlockFile
LockFileEx
LockFile
SetFilePointer
InterlockedIncrement
GetFileAttributesW
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FlushFileBuffers
GetCurrentDirectoryW
WriteConsoleW
FindFirstFileW
TlsSetValue
GetACP
EnumSystemLocalesW
Sleep
IsValidLocale
GetModuleFileNameA
PeekNamedPipe
GetDriveTypeW
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetFileType
GetFullPathNameA
GetFullPathNameW
GetModuleHandleExW
RtlUnwind
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
VirtualProtect
VirtualFree
VirtualAlloc
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
ExitProcess
GetStdHandle
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetCPInfo
GetStringTypeW
GetLocaleInfoW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsAlloc
CreateEventW
SetLastError
EncodePointer
TryEnterCriticalSection
TlsGetValue
FindResourceW
LoadResource
LockResource
SizeofResource
GetUserDefaultLCID
MulDiv
MoveFileExW
DeleteFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTickCount
LocalAlloc
RemoveDirectoryW
lstrcmpiW
GlobalUnlock
GlobalLock
SetFileAttributesW
GetCurrentThreadId
ReadFile
GetFileSize
CreateFileW
LocalFree
FindClose
GetTimeZoneInformation
FindNextFileW
GlobalFree
GlobalAlloc
GetCurrentProcess
GetLastError
FreeLibrary
CreateProcessW
GetVersionExW
GetWindowsDirectoryW
GetTempPathW
WideCharToMultiByte
MultiByteToWideChar
OpenProcess
CreateThread
GetPrivateProfileIntW
WritePrivateProfileStringW
LoadLibraryW
CloseHandle
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
CreateDirectoryW
QueryPerformanceCounter
GetModuleFileNameW
GetPrivateProfileStringW
QueryPerformanceFrequency
HeapFree
GetModuleHandleW
GetProcAddress
GetProcessHeap
HeapAlloc
SetStdHandle
GetSystemTime
GetClassNameW
GetWindowRect
GetDesktopWindow
GetSystemMetrics
PostMessageW
keybd_event
FindWindowExW
CharLowerW
GetFocus
FindWindowW
IsWindow
IsWindowVisible
GetWindowLongW
SetWindowLongW
SetRect
MonitorFromPoint
GetDC
ReleaseDC
GetMonitorInfoW
EnumDisplayMonitors
SystemParametersInfoW
PtInRect
ClientToScreen
WindowFromPoint
KillTimer
DefWindowProcW
CreateWindowExW
DestroyWindow
SetTimer
SendMessageW
GetKeyState
SendMessageTimeoutW
ShowWindow
InvalidateRect
SetCursor
LoadCursorW
OffsetRect
ReleaseCapture
MoveWindow
SetCapture
BeginPaint
EndPaint
ScreenToClient
FillRect
GetClientRect
GetCursorPos
CreateMenu
CreatePopupMenu
DeleteMenu
DestroyMenu
SetMenuInfo
GetMenuInfo
EnableMenuItem
SetRectEmpty
InsertMenuW
GetWindowThreadProcessId
GetParent
SetWindowPos
UnionRect
RegisterClassExW
GetCapture
DrawTextW
CharNextW
CallWindowProcW
CallNextHookEx
RemovePropW
SetPropW
GetPropW
SetClassLongW
GetClassLongW
UnhookWindowsHookEx
SetWindowsHookExW
GetWindowDC
UpdateLayeredWindow
TrackPopupMenu
RemoveMenu
ModifyMenuW
GetTextExtentPointW
SetTextColor
ExcludeClipRect
GetTextExtentPoint32W
CreateFontW
CreateSolidBrush
SetBkMode
EnumFontsW
CreateICW
TextOutW
DeleteDC
CreateCompatibleBitmap
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
CreateDIBSection
ExtTextOutW
SetBkColor
GetDeviceCaps
CreatePen
MoveToEx
LineTo
GetPixel
GetStockObject
CreateBitmap
GetObjectW
GetDIBits
CreateDCW
GetAclInformation
ImpersonateLoggedOnUser
RevertToSelf
LookupAccountSidW
GetTokenInformation
RegCreateKeyExW
DuplicateTokenEx
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
GetSecurityDescriptorControl
SetSecurityDescriptorDacl
AddAccessAllowedAce
AddAce
EqualSid
GetAce
InitializeAcl
GetLengthSid
GetSecurityDescriptorDacl
LookupAccountNameW
InitializeSecurityDescriptor
SHGetFolderPathW
SHGetSpecialFolderPathW
SHAppBarMessage
ShellExecuteW
CreateStreamOnHGlobal
GdipCloneFont
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipGetDC
GdipFillRectangleI
GdipReleaseDC
GdipGetGenericFontFamilySansSerif
GdipGetImageRawFormat
GdipCreateBitmapFromStream
GdipCloneImage
GdipDisposeImage
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipDrawLine
GdipSetPenDashStyle
GdipDrawLineI
GdipDrawString
GdipFillPath
GdipDrawPath
GdipDeletePen
GdipCreatePen1
GdipSetImageAttributesColorKeys
GdipAddPathLineI
GdipAddPathArcI
GdipCreateFont
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateSolidFill
GdipCloneBrush
GdipAlloc
GdipDeleteBrush
GdipDisposeImageAttributes
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipFree
GdipNewPrivateFontCollection
GdipNewInstalledFontCollection
GdipGetFontCollectionFamilyCount
GdipMeasureString
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipGetFontSize
GdipGetFamily
GdipDeleteFontFamily
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeletePath
GdipCreatePath
GdiplusStartup
GdipDrawImageRectRectI
GetModuleFileNameExW
PathFileExistsA
PathFileExistsW
ord21
ord23
ord20
ord22
?GetPreviewWndUtils@@YAPAVCLibPreviewWndUtils@@XZ
?GetPreviskinSkinName@@YAPB_WXZ
?GetResUtils@@YAPAVCLibResUtils@@XZ
?InitInitTempByShare@@YAX_N@Z
?LibExitInstance@@YAXXZ
?LibInitInstance@@YAXXZ
?Lib_GetTempParameterValue@@YAPB_WH@Z
?Lib_SetTempParameterValue@@YAXHH@Z
?Lib_SetTempParameterValue@@YAXHPB_W@Z
?PreviewCabSkin@@YAXPB_W@Z
?PreviewIsConfigSearchCand@@YA_NXZ
?PreviewResSkin@@YAXPB_W0@Z
?SetContextComposeOption@@YAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ