Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
AngryBirds.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
AngryBirds.exe
Resource
win10v2004-20241007-en
Target
AngryBirds.exe
Size
1.7MB
MD5
c8014f54a31d03444eb1939f66182693
SHA1
fbe9d8106397937c12051695d9dfa71d7fb6b165
SHA256
495a994ce55aa12a7052b24afc6513f9229fc7d804a549e1512e1e2077bd81c4
SHA512
5c20c0f938751295274bea94d31b296c06dc981b0ccd01378665671b4931ff83964ff46dbf88143624012a0dad517d71817fc575170f65d72487bad813b63c4a
SSDEEP
49152:LDEkjzoUB1cGvcrnHe1dnyjggQvtoZdMXRgZRXVE5QTGZ0w:LDEQNzcwWnGdytQvtoZdMXRgZRXV
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
f:\JenkinsHDD\workspace\AngryBirdsClassic-Windows-4.0.0\AngryBirdsClassic\build\windows\distribution\game\AngryBirds.pdb
GetCurrentDirectoryW
SetErrorMode
LoadLibraryW
OutputDebugStringA
GetLastError
FlushFileBuffers
MoveFileExW
GetFileAttributesExW
GetFullPathNameW
GetVersionExW
SetEvent
ResetEvent
WaitForSingleObjectEx
GetModuleFileNameW
CreateProcessW
GetCurrentProcessId
GetCurrentThreadId
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
GetModuleHandleW
FormatMessageW
QueryPerformanceFrequency
QueryPerformanceCounter
ReleaseMutex
CreateMutexW
GetSystemInfo
SetThreadPriority
GetThreadPriority
MultiByteToWideChar
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GlobalLock
GlobalUnlock
FindFirstFileW
CreateEventW
FindNextFileW
FindClose
GetSystemTimeAsFileTime
SetLastError
FormatMessageA
GetProcAddress
LoadLibraryA
GetVersionExA
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SleepEx
GetTickCount
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
Sleep
ExpandEnvironmentStringsA
GetFileAttributesW
GetLocaleInfoA
GetFileAttributesA
TranslateMessage
DispatchMessageW
PeekMessageW
SetCapture
ClientToScreen
SetCursorPos
ReleaseCapture
LoadIconW
RegisterClassExW
AdjustWindowRectEx
MonitorFromPoint
CreateWindowExW
UnregisterClassW
DefWindowProcW
PostQuitMessage
GetWindowTextA
ShowWindow
ScreenToClient
TrackMouseEvent
GetMessageW
LoadImageW
SetCursor
ReleaseDC
GetDC
SetWindowTextW
GetClientRect
GetWindowRect
MoveWindow
GetWindowPlacement
MonitorFromWindow
GetMonitorInfoW
SetWindowLongW
SetWindowPos
SetWindowPlacement
ClipCursor
CloseClipboard
GetClipboardData
OpenClipboard
MessageBoxA
MessageBoxW
GetTopWindow
SendMessageW
GetCursorPos
LoadCursorW
SetForegroundWindow
FindWindowW
DestroyWindow
GetDlgItem
GetWindowLongW
DialogBoxIndirectParamW
EndDialog
SendDlgItemMessageA
GetDlgItemTextA
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
getsockname
setsockopt
send
ntohs
WSAGetLastError
WSAStartup
WSACleanup
bind
htons
getsockopt
getpeername
closesocket
socket
connect
WSASetLastError
recvfrom
sendto
getaddrinfo
freeaddrinfo
accept
listen
__WSAFDIsSet
select
ioctlsocket
gethostname
recv
ord50
ord46
ord41
ord26
ord30
ord60
ord35
ord143
ord27
ord301
ord33
ord200
ord79
ord211
ord32
ord22
CryptCreateHash
RegQueryValueExW
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptAcquireContextA
RegOpenKeyExW
RegCloseKey
ord11
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
_FInf
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xfunc@tr1@std@@YAXXZ
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_BADOFF@std@@3_JB
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
_difftime64
_localtime64
_mktime64
_mkdir
remove
??_V@YAXPAX@Z
rand
sprintf
atoi
ceil
free
malloc
strncpy
_CIpow
fprintf
__iob_func
modf
frexp
fclose
longjmp
_setjmp3
strerror
_errno
fopen
atof
abort
fread
sscanf
getenv
calloc
_gmtime64
ferror
fflush
fseek
fwrite
_CIlog
strrchr
strchr
strtol
isdigit
_wfopen
_get_osfhandle
_fileno
_findclose
_wfindnext64i32
_wfindfirst64i32
ftell
_ftelli64
_fseeki64
feof
ungetc
freopen
getc
realloc
_CIfmod
strftime
clock
_CIsinh
_CIcosh
_CItan
_CItanh
_CIasin
_CIatan
_CIlog10
_CIexp
ldexp
srand
_HUGE
tolower
toupper
isxdigit
isalnum
isupper
isspace
ispunct
iscntrl
isalpha
islower
strpbrk
fputs
strtoul
strtod
strncat
strcspn
strcoll
localeconv
__sys_nerr
_strtoi64
strncmp
fgets
qsort
fputc
_beginthreadex
_fstat64
_lseeki64
_stat64
_strdup
isprint
isgraph
_close
_open
?terminate@@YAXXZ
_vsnprintf_s
_vscprintf
??4exception@std@@QAEAAV01@ABV01@@Z
_localtime64_s
_ftime64_s
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_stricmp
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
_invoke_watson
_controlfp_s
_CIatan2
_CIacos
memchr
floor
_CIsin
_CIcos
_CIsqrt
__RTDynamicCast
??0exception@std@@QAE@XZ
_time64
_purecall
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
memset
memmove
memcpy
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strstr
_write
_read
_strnicmp
_lseek
vswprintf_s
_chdir
__argv
__argc
_snprintf
exit
GdipFree
GdipAlloc
GdipDeleteBrush
GdipDeleteGraphics
GdipGetFontCollectionFamilyCount
GdipNewInstalledFontCollection
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdiplusStartup
GdipCreateSolidFill
GdipCreateFromHWND
GdipGetImageGraphicsContext
GdipSetTextRenderingHint
GdipDrawString
GdipMeasureString
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipGetFamilyName
GdipIsStyleAvailable
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipCreateFont
GdipGetFontStyle
GdipGetFontHeight
GdipCloneBrush
GdipCloneImage
GdipDeleteFont
GetAdaptersInfo
UuidCreate
RpcStringFreeA
UuidToStringA
DeleteObject
CreateFontA
ShellExecuteExW
SHGetFolderPathAndSubDirW
SHFileOperationW
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ