Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
275987514ceacee766917608602d9ead85854e427d66dc5396840bcd2ac962ffN.exe
Resource
win7-20241010-en
Target
275987514ceacee766917608602d9ead85854e427d66dc5396840bcd2ac962ffN
Size
1.1MB
MD5
8b6c292756bd3234313b16a4134d7e70
SHA1
4ee1eb57f3e7a09b681671966d543c4f6c4451f7
SHA256
275987514ceacee766917608602d9ead85854e427d66dc5396840bcd2ac962ff
SHA512
47a2077a1034ed556381d3331b832e459e8e17207793fa82cfc248b7bca1167d71d0847454c7b1968ab2df4adef7a999947efea76980b88f335a2f5827be95d8
SSDEEP
24576:TeGnhhw0u5KyQaI+F4dtt9SYUEV0VfYjqblTqU+uN8VqqhUe+FkrEH7ig:TeVlL5K7fSISCjwTUW8VqqhGr
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\GWCommon\NeoRebirth\60.시험관련\출제\Tax\Release\Tax.pdb
ImmSetConversionStatus
ImmGetConversionStatus
ImmReleaseContext
ImmGetContext
ord1533
ord8686
ord11357
ord5322
ord13049
ord4398
ord2592
ord11966
ord9523
ord9365
ord7171
ord6879
ord939
ord2478
ord6699
ord935
ord899
ord936
ord2695
ord5939
ord2479
ord4494
ord4518
ord3515
ord2702
ord6813
ord2372
ord1383
ord938
ord285
ord3220
ord1607
ord1333
ord5182
ord2490
ord665
ord406
ord4516
ord1552
ord3187
ord5770
ord5535
ord663
ord404
ord2694
ord4442
ord2596
ord799
ord12404
ord13194
ord9972
ord10457
ord10304
ord13136
ord12165
ord12617
ord7766
ord9965
ord13227
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord612
ord6741
ord5830
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord3115
ord4905
ord9272
ord8452
ord6482
ord1098
ord1186
ord4211
ord7332
ord7138
ord4043
ord4967
ord814
ord316
ord601
ord820
ord5979
ord6687
ord4405
ord5632
ord5324
ord2208
ord1810
ord1809
ord1675
ord3353
ord6408
ord1492
ord4682
ord6187
ord744
ord524
ord5653
ord2597
ord2069
ord1353
ord636
ord367
ord4631
ord4519
ord4131
ord5167
ord1599
ord811
ord813
ord6311
ord4543
ord3637
ord6577
ord9914
ord6579
ord5008
ord4000
ord1938
ord1354
ord1137
ord1108
ord3543
ord2106
ord1183
ord3537
ord654
ord595
ord2901
ord11403
ord1665
ord12278
ord11376
ord12258
ord12243
ord4652
ord7773
ord13152
ord10872
ord11036
ord12635
ord8802
ord9651
ord265
ord266
ord6171
ord6514
ord3729
ord4322
ord2501
ord4448
ord3528
ord4681
ord4910
ord4348
ord2891
ord4071
ord4081
ord4080
ord3286
ord2764
ord2893
ord2774
ord3140
ord2966
ord4728
ord3112
ord2983
ord2771
ord5650
ord1727
ord1791
ord1792
ord2139
ord335
ord5548
ord5625
ord1442
ord801
ord286
ord600
ord296
ord4213
ord3226
ord6376
ord5404
ord3682
ord6804
ord4174
ord6802
ord1641
ord2368
ord2375
ord2630
ord2612
ord2610
ord2628
ord2640
ord2617
ord2633
ord2638
ord2621
ord2623
ord2625
ord2619
ord2635
ord2615
ord971
ord967
ord969
ord965
ord960
ord5683
ord5685
ord6466
ord1728
ord4702
ord5154
ord3743
ord5664
ord4603
ord6800
ord5512
ord2074
ord5602
ord4664
ord1493
ord4345
ord1751
ord1754
ord6411
ord3355
ord7309
ord7110
ord639
ord374
ord3794
ord280
ord2537
ord1272
memset
__CxxFrameHandler3
_CxxThrowException
memcpy
abort
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_cexit
__wgetmainargs
_amsg_exit
_beginthreadex
_endthreadex
strncpy
strchr
sprintf
strncmp
_msize
rand_s
rand
srand
malloc
_wsplitpath_s
_read
_write
_close
_telli64
_lseeki64
memmove
_wcsicoll
_wtoi64
_get_osfhandle
_commit
_wsopen_s
_chsize_s
_vsnwprintf_s
realloc
_purecall
free
wcscoll
_mktime64
memmove_s
ceil
_vswprintf
_wmakepath
_wsplitpath
_errno
_swprintf
_wmkdir
_wstat64i32
?what@exception@std@@UBEPBDXZ
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
_wchdir
_wgetcwd
_localtime64_s
_time64
_exit
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
_wtoi
_waccess
floor
WaitForSingleObject
CreateFileW
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
MoveFileExW
MoveFileW
GetLogicalDriveStringsW
GetComputerNameW
CreateDirectoryW
GetFileAttributesW
GetTempPathW
SetFileTime
SetVolumeLabelW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
QueryPerformanceFrequency
QueryPerformanceCounter
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
HeapCompact
SetFilePointer
SetEndOfFile
HeapAlloc
SystemTimeToFileTime
GetDiskFreeSpaceW
FreeLibrary
LoadLibraryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetDriveTypeW
OutputDebugStringW
CreateProcessW
WinExec
SetFileAttributesW
CopyFileW
Sleep
GetSystemDirectoryW
DeleteFileW
LocalFree
FormatMessageW
CloseHandle
GetLastError
CreateMutexW
GetModuleFileNameW
GetDiskFreeSpaceExW
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedExchange
GetCurrentThreadId
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
DeleteFileA
AreFileApisANSI
GetSystemTime
GetTempPathA
GetCurrentProcessId
GetVersionExA
OutputDebugStringA
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingA
LoadLibraryA
LockFileEx
HeapSize
GetProcAddress
FlushFileBuffers
ReadFile
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
GetVersionExW
WriteFile
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
WaitForSingleObjectEx
LockFile
FlushViewOfFile
UnlockFile
InterlockedCompareExchange
HeapFree
lstrlenW
IsWindow
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
GetParent
FindWindowW
DrawIcon
GetSystemMetrics
IsIconic
PostMessageW
AppendMenuW
GetSystemMenu
GetAsyncKeyState
IsCharAlphaW
GetFocus
ReleaseCapture
SetRect
SetWindowRgn
GetClientRect
SendMessageW
LoadIconW
EnableWindow
RedrawWindow
GetTextExtentPoint32W
BitBlt
DeleteObject
SelectObject
CreateCompatibleDC
CreateRoundRectRgn
CreateRectRgn
GetObjectW
CreateFontW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
SHGetSpecialFolderLocation
SHGetFileInfoW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHChangeNotify
SHGetSpecialFolderPathW
SHFileOperationW
InitCommonControlsEx
CoCreateInstance
??1_Lockit@std@@QAE@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??1locale@std@@QAE@XZ
??0locale@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_WI@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
??0_Lockit@std@@QAE@H@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ