Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
6.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6.exe
Resource
win10v2004-20240802-en
Target
6.exe
Size
740KB
MD5
4899cb26ca0aded56ef12ee847322b1e
SHA1
2e62d8535573ebbdfc14ab83a238a2272ba2358b
SHA256
8b062bf024751af9de9a17578c7da8bf53419ad38055fad0a497038e31dda4a9
SHA512
deb9cfef7b95096cf62d06d460d9cad1948ada9d0e372c5797cb5d78d13687811ea8688e3a7f95fe6018eeb88fa56372e469961b1fe71e0fdf682e31eb92ffc4
SSDEEP
12288:yEs9aQl9b4dKnafiw4yaJjJjzScxrgpxUZ/zJyidfq4:yEs9v9b4dKnafiw4yaJjJvSkgpWFzJyI
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\Dev\geegee-client\WPCEF\Win32\Release\wp_l_renderer.pdb
cef_v8context_get_current_context
cef_string_list_size
cef_string_list_value
cef_string_list_append
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_multimap_alloc
cef_string_multimap_free
cef_execute_process
cef_post_task
cef_v8value_create_function
cef_v8value_create_string
cef_v8value_create_int
cef_v8value_create_bool
cef_process_message_create
cef_api_hash
cef_command_line_get_global
cef_string_map_free
cef_string_map_alloc
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_log
cef_enable_highdpi_support
cef_string_utf16_clear
cef_string_utf16_cmp
cef_string_utf16_to_utf8
cef_string_utf8_clear
cef_string_utf16_set
cef_string_utf8_to_utf16
ResetEvent
FormatMessageA
FormatMessageW
WideCharToMultiByte
LocalFree
CreateEventA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
GetCurrentProcessId
OutputDebugStringA
OpenProcess
WaitForSingleObject
TerminateProcess
GetProcAddress
GetModuleHandleW
SetLastError
ReleaseSemaphore
WaitForSingleObjectEx
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
Sleep
GetCurrentThreadId
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleA
CreateWaitableTimerA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
_Thrd_sleep
_Thrd_detach
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Query_perf_counter
_Query_perf_frequency
_Xtime_get_ticks
?do_length@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PBD1I@Z
?_Xlength_error@std@@YAXPBD@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?do_unshift@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PAD1AAPAD@Z
__CxxFrameHandler3
__std_terminate
__std_exception_copy
__std_exception_destroy
_purecall
memcpy
memmove
memset
_CxxThrowException
__current_exception
__current_exception_context
_except_handler4_common
__p__commode
_set_fmode
__stdio_common_vsprintf
_errno
_exit
exit
_initterm_e
_initterm
_controlfp_s
_initialize_wide_environment
_configure_wide_argv
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_c_exit
terminate
_beginthreadex
strerror
_get_wide_winmain_command_line
_callnewh
malloc
_aligned_malloc
_aligned_free
_set_new_mode
free
strncpy
strtol
__setusermatherr
_configthreadlocale
_ftime64
??0?$codecvt_null@_W@archive@boost@@QAE@I@Z
??1?$codecvt_null@_W@archive@boost@@UAE@XZ
??_F?$codecvt_null@_W@archive@boost@@QAEXXZ
?do_always_noconv@?$codecvt_null@_W@archive@boost@@EBE_NXZ
?do_encoding@?$codecvt_null@_W@archive@boost@@EBEHXZ
?do_in@?$codecvt_null@_W@archive@boost@@EBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?do_max_length@?$codecvt_null@_W@archive@boost@@EBEHXZ
?do_out@?$codecvt_null@_W@archive@boost@@EBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?get_lock@singleton_module@serialization@boost@@AAEAA_NXZ
?is_locked@singleton_module@serialization@boost@@QAE_NXZ
?lock@?1??get_lock@singleton_module@serialization@boost@@AAEAA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@QAEXXZ
?unlock@singleton_module@serialization@boost@@QAEXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ