Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
d84e478503499f6140494d622680564be9fe864c9a718563324e05be2b6d10fa.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d84e478503499f6140494d622680564be9fe864c9a718563324e05be2b6d10fa.dll
Resource
win10v2004-20240802-en
Target
d84e478503499f6140494d622680564be9fe864c9a718563324e05be2b6d10fa
Size
73KB
MD5
5433dce47a55cae6756e3dd0b731c524
SHA1
288ac042c21cb7c49b8dc1aaa7140cd70b8a10a1
SHA256
d84e478503499f6140494d622680564be9fe864c9a718563324e05be2b6d10fa
SHA512
9547d0169d91b262990130bf5644cd8f01e940e92e62aaeedd1fe48dd5c07f06acefe4e69760a60c0cb7a8bd72ad0ef71e2dacdb99a9b57b135a06369dfe9d92
SSDEEP
1536:U3ev6hMLYAIO1nToIfD7dYGlzOpYhW07BkVxh7Bk6x2I:U3GLTdTBfDbzOpYhW0lmlN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
d:\3rd\soui-master\bin64\resprovider-zip.pdb
??0?$TStringT@DUchar_traits@SOUI@@@SOUI@@QEAA@XZ
?load_buffer_inplace@xml_document@pugi@@QEAA?AUxml_parse_result@2@PEAX_KIW4xml_encoding@2@@Z
??Y?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QEAAAEBV01@PEB_W@Z
?TrimRight@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QEAAAEAV12@_W@Z
??Bxml_parse_result@pugi@@QEBA_NXZ
??1?$TStringT@DUchar_traits@SOUI@@@SOUI@@QEAA@XZ
??1xml_document@pugi@@QEAA@XZ
?child@xml_node@pugi@@QEBA?AV12@PEB_W_N@Z
??7xml_node@pugi@@QEBA_NXZ
??0xml_document@pugi@@QEAA@XZ
??4?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QEAAAEAV01@PEB_W@Z
?first_child@xml_node@pugi@@QEBA?AV12@XZ
??Bxml_node@pugi@@QEBAP6AXPEAPEAPEAV01@@ZXZ
?attribute@xml_node@pugi@@QEBA?AVxml_attribute@2@PEB_W_N@Z
?value@xml_attribute@pugi@@QEBAPEB_WXZ
?name@xml_node@pugi@@QEBAPEB_WXZ
?CvtW2W@SStrCpCvt@SOUI@@SA?AV?$TStringT@_WUwchar_traits@SOUI@@@2@AEBV32@I@Z
??4?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QEAAAEAV01@AEBV01@@Z
?next_sibling@xml_node@pugi@@QEBA?AV12@XZ
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QEAA@PEB_W@Z
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QEAA@AEBV01@@Z
?SouiMalloc@soui_mem_wrapper@SOUI@@SAPEAX_K@Z
?SafeStrlen@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@SAHPEB_W@Z
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QEAA@XZ
?ConcatCopy@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@IEAA_NHPEB_WH0@Z
??1?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QEAA@XZ
?SouiFree@soui_mem_wrapper@SOUI@@SAXPEAX@Z
UnhandledExceptionFilter
GetCurrentProcess
SetUnhandledExceptionFilter
Sleep
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
FindResourceW
CloseHandle
CreateFileW
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
lstrcpyA
lstrlenA
DosDateTimeToFileTime
lstrcpyW
ReadFile
SetFilePointer
LockResource
LoadResource
SizeofResource
CreateIconIndirect
ReleaseDC
GetDC
CreateIconFromResource
OemToCharBuffW
GetSystemMetrics
SelectObject
StretchDIBits
CreateDIBSection
CreateCompatibleDC
DeleteObject
GetDeviceCaps
CreateBitmap
CreateDCW
CreateDIBitmap
DeleteDC
free
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
malloc
_wcsicmp
abs
memcpy
printf
memset
memcmp
_wcslwr
wcscpy_s
wcscmp
__CxxFrameHandler3
_purecall
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
_onexit
SCreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ