Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
211b85d27bb579db689e9d3a15632b346d6532075cdf80fab63540d344f4318c.dll
Resource
win7-20240903-en
Target
211b85d27bb579db689e9d3a15632b346d6532075cdf80fab63540d344f4318c
Size
577KB
MD5
089ed69626ecba88d6ce4c9c2b4c544a
SHA1
e89f6b2ca548313763065b99125e107c5e0e2e80
SHA256
211b85d27bb579db689e9d3a15632b346d6532075cdf80fab63540d344f4318c
SHA512
6dc50c557feb48302192fedba827fc5587e3d83ca3d152b176217e0e7355ac61fc6f50ae45a4191423eb812f7bf8f7b90c9a4fb7bdda16208a989606ee8ea8aa
SSDEEP
12288:hw/oUl2eOOZ/Ql5ZWIvHdHl7EX0JbRoFO1fSBinb2nYyCnQtvo4nHnBjvrEH7Yd:haUdHldbXfSob2n8nQJoWlrEH7I
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
E:\AWork\share_lib\99_PublicLibrary\AliyunLog\UserInfoCollect\Release\AliyunWrap.pdb
CryptDestroyKey
CryptEncrypt
CryptReleaseContext
CryptImportKey
CryptAcquireContextA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
LookupAccountNameW
GetUserNameW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
CreateProcessAsUserW
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
htons
ntohs
WSAGetLastError
getsockname
setsockopt
WSAIoctl
WSAStartup
WSACleanup
socket
select
__WSAFDIsSet
WSASetLastError
send
recv
getsockopt
gethostname
ioctlsocket
getaddrinfo
freeaddrinfo
listen
accept
recvfrom
sendto
connect
closesocket
getpeername
bind
ord35
ord32
ord200
ord30
ord79
ord143
ord33
ord301
ord217
ord211
ord27
ord41
ord46
ord50
ord26
ord22
ord60
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
SetStdHandle
GetCurrentDirectoryA
GetFullPathNameA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
VirtualAlloc
VirtualFree
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
LeaveCriticalSection
CreateThread
WaitForSingleObject
CloseHandle
Sleep
CopyFileW
SetLastError
GetLastError
FormatMessageA
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetModuleHandleA
QueryPerformanceFrequency
SleepEx
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
FreeLibrary
GetTickCount
QueryPerformanceCounter
ExpandEnvironmentStringsA
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
EnterCriticalSection
OpenProcess
GetStartupInfoA
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTimeZoneInformation
RaiseException
RtlUnwind
ExitProcess
HeapSize
InterlockedDecrement
InterlockedIncrement
TlsFree
SetEvent
OpenEventW
CreateEventW
CreateMutexW
GetCurrentProcess
CreateProcessW
GetFileAttributesA
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
MultiByteToWideChar
GetModuleFileNameW
GetPrivateProfileStringW
WritePrivateProfileStringW
DeleteFileW
CreateFileW
WriteFile
GetFileAttributesW
GetPrivateProfileIntW
GetLocalTime
GlobalMemoryStatusEx
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCurrentProcessId
GetFileInformationByHandle
SetFilePointer
ExitThread
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
StrRChrA
EnumProcessModules
GetModuleFileNameExW
GetAdaptersInfo
UuidCreate
?SendLogToCloud@@YA_NABV?$vector@U?$pair@PA_WPA_W@std@@V?$allocator@U?$pair@PA_WPA_W@std@@@2@@std@@@Z
?SendLogToCloud@@YA_NHPAPADPAI01@Z
AliyunAddParamToSessionA
AliyunAddParamToSessionW
AliyunCloseSession
AliyunEnableUserInfoCollect
AliyunEndCache
AliyunGetUserUid
AliyunInstallConfigFilePath
AliyunInstallInitUid
AliyunIsEnableUserInfoCollect
AliyunOpenSession
AliyunSendInfo
AliyunUninstallEnd
AliyunUninstallStart
add_log_full
add_pack_id
add_source
add_tag
add_topic
fix_log_group_time
free_lz4_log_buf
log_group_create
log_group_destroy
post_log_result_destroy
post_logs_from_lz4buf
serialize_to_proto_buf_with_malloc
serialize_to_proto_buf_with_malloc_lz4
serialize_to_proto_buf_with_malloc_no_lz4
sls_log_destroy
sls_log_init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ