Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ddb394c904c67f3bf4313fa604bfea025769c515a1c1e5e4ccb4c08db75adc9f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddb394c904c67f3bf4313fa604bfea025769c515a1c1e5e4ccb4c08db75adc9f.exe
Resource
win10v2004-20241007-en
Target
ddb394c904c67f3bf4313fa604bfea025769c515a1c1e5e4ccb4c08db75adc9f
Size
487KB
MD5
6fdfc69f4de019b245b305c37d9e0053
SHA1
cb13ffafdcb0e6248843cf89086a1d663b025852
SHA256
ddb394c904c67f3bf4313fa604bfea025769c515a1c1e5e4ccb4c08db75adc9f
SHA512
90bfcc5c1469624006f35ac45490797582a09e8685c804fc4af402763214f5c89f392d731ee7c6b5afed0493594b71539673c8edebc0f062d048fdfc5ba23344
SSDEEP
6144:MkKpWkw5cF6MNcVVI/G4fXX7+4fRTBnYM1H+IvVMfS1C7cC7Vqn:MkU8uF62cqvXSSTNYM1HMfI
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\KINGSOFT_DUBA\Build\Build_Src\kisengine_git\kisengine_git\product\win32\dbginfo\kwtpanel.pdb
GetPrivateProfileIntW
OpenEventW
SetEvent
MoveFileW
GetLocalTime
lstrcpyW
CreateProcessW
SetLastError
LocalFree
CreateEventW
WaitForSingleObject
GetExitCodeProcess
OpenMutexW
CreateMutexW
OutputDebugStringW
GetCurrentThreadId
SetFileAttributesW
DecodePointer
GetCurrentProcessId
CreateThread
ResetEvent
RaiseException
InitializeCriticalSectionEx
GetFileSize
LoadLibraryW
FreeLibrary
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
FindClose
DeleteFileW
FindFirstFileW
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
ReadFile
WriteFile
Sleep
CreateFileW
WaitNamedPipeW
MapViewOfFile
OpenFileMappingW
CloseHandle
UnmapViewOfFile
GetLastError
GetProcAddress
GetModuleHandleW
GetPrivateProfileStringW
GetModuleFileNameW
GetFileAttributesW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetWindowLongW
CallWindowProcW
DestroyWindow
UnregisterClassW
SendMessageW
SetWindowTextW
ShowWindow
CreateWindowExW
DefWindowProcW
SetWindowLongW
LoadCursorW
GetClassInfoExW
RegisterClassExW
PeekMessageW
GetMessageW
FindWindowW
TranslateMessage
DispatchMessageW
PostMessageW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ShellExecuteExW
ord680
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Xout_of_range@std@@YAXPBD@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
PathRemoveFileSpecW
PathFileExistsW
PathAddBackslashW
memset
wcschr
__current_exception
__current_exception_context
_except_handler4_common
wcsrchr
strchr
__std_exception_copy
memcpy
memmove
__std_exception_destroy
__CxxFrameHandler3
__std_terminate
memchr
memcmp
_CxxThrowException
_purecall
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
fclose
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
_set_fmode
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vsnwprintf_s
__p__commode
_wfopen
fwrite
wcsnlen
wcspbrk
_wcslwr_s
wcscmp
wcsncpy_s
wcslen
isspace
strncmp
isalnum
isalpha
tolower
_wcsicmp
wmemcpy_s
wcscpy_s
strlen
strcmp
wcscat
wcscat_s
_wtoi
_initterm_e
_initterm
_c_exit
_register_thread_local_exe_atexit_callback
_get_wide_winmain_command_line
_exit
_invalid_parameter_noinfo
_initialize_wide_environment
_configure_wide_argv
_controlfp_s
_set_app_type
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
terminate
_cexit
_beginthreadex
_crt_atexit
exit
_errno
_initialize_onexit_table
_register_onexit_function
free
_callnewh
_set_new_mode
calloc
_recalloc
malloc
modf
__setusermatherr
_dclass
_isnan
_finite
_waccess
_mbsstr
setlocale
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE