Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
64f6828b13ff287f67f9c8b6d56f143d21bbf8ff4b1d3f6ce1478a195cd45ab2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64f6828b13ff287f67f9c8b6d56f143d21bbf8ff4b1d3f6ce1478a195cd45ab2.exe
Resource
win10v2004-20240802-en
Target
64f6828b13ff287f67f9c8b6d56f143d21bbf8ff4b1d3f6ce1478a195cd45ab2
Size
1.5MB
MD5
c123ae3c9ee75e67063ea15480d348ec
SHA1
9175e7ae13fb54b4e97b1407efb05742da93554b
SHA256
64f6828b13ff287f67f9c8b6d56f143d21bbf8ff4b1d3f6ce1478a195cd45ab2
SHA512
88d43dfd1eb8bd617ed5275e2ac92b854980b693cfde5a86da25cdefab1114bbc48795bcdb050a66ebe9ce0409c1e7859387e3c0ed133de6e2b51d1f2910590f
SSDEEP
24576:W1XO5QxybJFe8QijvP4RhjFqrM7aOIoO4F2vIP34SeG+NyORWiKXToI+Z1v/48m/:vGYFFe8QijvP4RhjFj7vICC0LcAiKXxp
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
e:\landun\p-b509c47dc4c74254aad211b0f5dd6bad\qqlivepc2\Symbol\FinalRelease\QQLivePluginUpdate.pdb
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
DuplicateHandle
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateEventW
CreateFileMappingW
CreateProcessW
SearchPathW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
Module32FirstW
Module32NextW
GetFileType
WriteFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
DosDateTimeToFileTime
GetCurrentDirectoryW
GetLocalTime
DeleteFileW
LoadLibraryExW
SetLastError
FindClose
lstrlenW
GetFullPathNameW
FindFirstFileW
FindNextFileW
CopyFileW
SetEvent
ResetEvent
lstrcatW
GetCommandLineW
WritePrivateProfileStringW
OpenProcess
GetExitCodeProcess
Sleep
OutputDebugStringA
RemoveDirectoryW
SetFileAttributesW
MoveFileW
MoveFileExW
Process32FirstW
Process32NextW
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
GetThreadTimes
UnregisterWait
SuspendThread
GetProcessAffinityMask
WriteProcessMemory
ReadProcessMemory
SetErrorMode
OpenThread
GetCurrentThreadId
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
VirtualAllocEx
VirtualQuery
GetSystemDirectoryW
LoadLibraryW
DeviceIoControl
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
FreeLibrary
DecodePointer
WaitForSingleObject
CreateThread
WideCharToMultiByte
MultiByteToWideChar
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
GetEnvironmentVariableW
TryEnterCriticalSection
GetExitCodeThread
GetTempPathW
GetLongPathNameW
GetNativeSystemInfo
GetFileAttributesW
CreateDirectoryW
GetPrivateProfileStringW
FindResourceExW
FindResourceW
SizeofResource
LoadResource
LockResource
CreateFileW
GetModuleHandleW
CloseHandle
ReadFile
GetProcAddress
GetFileAttributesExW
GetPrivateProfileIntW
GetModuleFileNameW
GetLastError
GetProcessHeap
GetVersionExW
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetModuleHandleA
WaitForSingleObjectEx
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetConsoleCP
SetStdHandle
PeekNamedPipe
GetDriveTypeW
GetACP
ExitProcess
FreeLibraryAndExitThread
ExitThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWaitEx
FindFirstFileExW
IsDebuggerPresent
OutputDebugStringW
FormatMessageW
QueryPerformanceCounter
QueryPerformanceFrequency
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetStdHandle
VerSetConditionMask
VerifyVersionInfoW
SwitchToThread
UnlockFile
LockFileEx
GetConsoleMode
WriteConsoleW
AllocConsole
HeapCreate
GetCurrentThread
SetThreadPriority
GetThreadPriority
RtlCaptureStackBackTrace
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleHandleExW
VirtualAlloc
VirtualFree
FlushFileBuffers
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
IsWindow
SendMessageW
GetDesktopWindow
KillTimer
SetTimer
RegCreateKeyExW
ReportEventW
RegisterEventSourceW
GetLengthSid
CopySid
DeregisterEventSource
SystemFunction036
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
CloseServiceHandle
GetTokenInformation
OpenProcessToken
SHGetFolderPathW
CommandLineToArgvW
SHGetSpecialFolderPathW
StringFromGUID2
CLSIDFromString
CoCreateGuid
CoInitialize
CoUninitialize
CoCreateInstance
SysAllocString
SysFreeString
SysStringLen
PathFindFileNameW
PathIsDirectoryEmptyW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
WinVerifyTrust
WSASocketW
WSASetLastError
GetAddrInfoW
recv
WSAStartup
WSAGetLastError
shutdown
ntohl
htonl
setsockopt
WSASend
closesocket
send
FreeAddrInfoW
WSACleanup
htons
connect
gethostname
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
NetApiBufferFree
NetWkstaTransportEnum
Netbios
InternetCloseHandle
InternetOpenUrlW
InternetReadFile
InternetSetOptionW
InternetOpenW
InternetConnectW
InternetWriteFile
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestExW
HttpEndRequestW
HttpQueryInfoW
timeGetTime
SymSetOptions
SymFromAddr
SymSetSearchPathW
SymGetSearchPathW
SymInitialize
SymGetLineFromAddr64
?AddExtraMem@TXBugReport@@YAHKI@Z
?AddExtraMem@TXBugReport@@YAHPAXI@Z
?AddIgnoreHookCheckModule@TXBugReport@@YAXPB_W@Z
?AddReleaseMonitorPoint@TXBugReport@@YAXPAJ@Z
?DoBugReport@TXBugReport@@YAJPAU_EXCEPTION_POINTERS@@PB_W@Z
?GetBugReportFlag@TXBugReport@@YAKXZ
?GetBugReportInfo@TXBugReport@@YAPAUtagBugReportInfo@1@XZ
?GetCustomFiltFunc@TXBugReport@@YAP6AHPAU_EXCEPTION_POINTERS@@@ZXZ
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?InitBugReportEx@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@ZH@Z
?RaiseSelfFatalException@TXBugReport@@YAXW4SelfException@1@@Z
?RecordCallStackIfNeed@TXBugReport@@YAXPAJ@Z
?SetBugReportFlag@TXBugReport@@YAHK@Z
?SetBugReportPath@TXBugReport@@YAHPB_W@Z
?SetBugReportUin@TXBugReport@@YAXKH@Z
?SetCustomFiltFunc@TXBugReport@@YAXP6AHPAU_EXCEPTION_POINTERS@@@Z@Z
?SetExtInfo@TXBugReport@@YAHKKPB_W@Z
?SetExtRptFilePath@TXBugReport@@YAHPB_W0@Z
?SetLogFileMd5Dir@TXBugReport@@YAHPB_W00@Z
?UninitBugReport@TXBugReport@@YAXXZ
?ValidateBugReport@TXBugReport@@YAXXZ
?pfPostBugReport@TXBugReport@@3P6AXXZA
?pfPreBugReport@TXBugReport@@3P6AXXZA
GetHandleVerifier
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ