Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
LICLUA.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
LICLUA.exe
Resource
win10v2004-20240802-en
Target
LICLUA.EXE
Size
634KB
MD5
5d724a7cef36d412960c538c67dae0eb
SHA1
3eb733098aa4b620b9424b71ba736a53009262ba
SHA256
6670a873a669941e1a9bb016962b05daef1e1038fa96fd6591481928e10d6078
SHA512
76569dbbed4c5d903ca3a2a2ee738a18d45b84b8797533051bddd1bd38cb662faba8167f9b8af299335705b4a0dd27b34ccbf53d12dea4e6c43cf7fca6915547
SSDEEP
6144:kKO32EEXDOACQy+puxtkiHGo0mWlv/x+9BMHmD1tYFLqY/W5R02qO7VKCG7L:UmEEX6A5ExHGoJWO9+aYFLq3nG7L
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
d:\dbs\el\omr\target\x64\ship\setupexe\x-none\LicLua.pdb
RegCreateKeyExW
RegOpenKeyExW
RegGetValueW
RegQueryValueExW
RegCloseKey
EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister
GetCurrentThreadId
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
IsValidCodePage
SetLastError
FileTimeToSystemTime
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
GetCurrentProcess
GetSystemTimeAsFileTime
TerminateProcess
GetModuleFileNameA
GetShortPathNameA
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
GetProcAddress
GetModuleHandleW
IsWow64Process
GetCurrentProcessId
K32GetProcessMemoryInfo
GlobalMemoryStatusEx
SetErrorMode
SleepConditionVariableSRW
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
InitOnceComplete
InitOnceBeginInitialize
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WakeAllConditionVariable
CoRevokeClassObject
CoRegisterClassObject
CoInitializeEx
StringFromGUID2
CoUninitialize
__CxxFrameHandler4
__std_terminate
__C_specific_handler
__std_exception_destroy
_purecall
__current_exception_context
__current_exception
memmove
memcpy
_CxxThrowException
memset
__C_specific_handler_noexcept
wcsrchr
__std_exception_copy
memcmp
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?uncaught_exceptions@std@@YAHXZ
?good@ios_base@std@@QEBA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
_Thrd_id
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?_Xbad_function_call@std@@YAXXZ
_Query_perf_counter
_Query_perf_frequency
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
malloc
_set_new_mode
free
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s
__p__commode
_set_fmode
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_narrow_winmain_command_line
_initterm
_initterm_e
_seh_filter_exe
_exit
_errno
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
terminate
abort
_invalid_parameter_noinfo_noreturn
exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_invalid_parameter_noinfo
wcsncpy_s
_stricmp
strnlen
wcsncat_s
strcmp
isdigit
wcscpy_s
strncpy_s
wcscmp
wcsnlen
_wtol
floor
ceilf
log10
round
__setusermatherr
pow
__initialize_lconv_for_unsigned_char
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ