Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
YandexPackLoader.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
YandexPackLoader.exe
Resource
win10-20220812-en
Target
YandexPackLoader.exe
Size
238KB
MD5
cba4508259b844221cc20de4d9a38156
SHA1
843f5bb602f2b2a96b14dd22cb461cd7d4398eae
SHA256
2bf7ea444b10018133eb136156126f88a59758c95e573804aff58ae10a670959
SHA512
b59d704242575b2f47768b554f1aae9d83ccb80c6c61f5fd85ce6a5fb06e736c83b7da345362dddd2e034c76bad00e079be1d1806f254b499a8582a13315e1c4
SSDEEP
3072:+x3P/sUhfv9/d7HvEQC2mCE0KMlbq3dVCZbnKvg8t8xtbXe0GjuKnkNrin2j53:S3P/Fv9/d7PzqdCbnKxjUIn2j53
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=YANDEX LLC,O=YANDEX LLC,L=Moscow,ST=Moscow,C=RU,1.2.840.113549.1.9.1=#0c12706b694079616e6465782d7465616d2e7275
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WTSQuerySessionInformationW
WTSFreeMemory
LsaGetLogonSessionData
LsaFreeReturnBuffer
LsaEnumerateLogonSessions
InterlockedDecrement
WaitForSingleObject
GetVersionExW
Sleep
GetLastError
CloseHandle
GetCurrentProcessId
CreateProcessW
GetExitCodeProcess
GetModuleFileNameW
CreateFileW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
VirtualQuery
GetCurrentProcess
HeapFree
FindClose
DuplicateHandle
MultiByteToWideChar
OutputDebugStringW
HeapAlloc
GetProcessHeap
WideCharToMultiByte
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetCommandLineW
SetHandleInformation
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
ExitProcess
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
WriteFile
DecodePointer
ReadConsoleW
ReadFile
SetEndOfFile
HeapReAlloc
HeapSize
GetModuleHandleExW
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
WriteConsoleW
SetFilePointerEx
TlsAlloc
LCMapStringW
CompareStringW
GetFileType
GetStringTypeW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetACP
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
EncodePointer
RtlUnwind
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CharLowerW
wsprintfW
CopySid
RegOpenKeyExW
ConvertSidToStringSidW
GetLengthSid
LsaNtStatusToWinError
RegQueryValueExW
OpenProcessToken
GetTokenInformation
RegCloseKey
ShellExecuteExW
SHCreateDirectoryExW
CoCreateInstance
CoUninitialize
CoInitialize
OleRun
VariantInit
SysFreeString
SysAllocString
GetErrorInfo
VariantClear
URLOpenBlockingStreamW
WinVerifyTrust
WSAGetLastError
htons
htonl
connect
socket
send
WSAStartup
getaddrinfo
shutdown
closesocket
WSACleanup
freeaddrinfo
recv
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ