Extended Key Usages
ExtKeyUsageTimeStamping
Overview
overview
10Static
static
10ItroublveTSC.exe
windows7-x64
1ItroublveTSC.exe
windows10-2004-x64
1bin/App.xml
windows7-x64
1bin/App.xml
windows10-2004-x64
1bin/Binari...rv.exe
windows7-x64
9bin/Binari...rv.exe
windows10-2004-x64
9bin/Program.js
windows7-x64
1bin/Program.js
windows10-2004-x64
1bin/Proper...er.vbs
windows7-x64
1bin/Proper...er.vbs
windows10-2004-x64
1bin/Proper...es.vbs
windows7-x64
1bin/Proper...es.vbs
windows10-2004-x64
1bin/obf/CLI.exe
windows7-x64
1bin/obf/CLI.exe
windows10-2004-x64
1bin/obf/Co...re.dll
windows7-x64
1bin/obf/Co...re.dll
windows10-2004-x64
1bin/obf/Co...er.dll
windows7-x64
1bin/obf/Co...er.dll
windows10-2004-x64
1bin/obf/Co...ns.dll
windows7-x64
1bin/obf/Co...ns.dll
windows10-2004-x64
1bin/obf/Co...er.dll
windows7-x64
1bin/obf/Co...er.dll
windows10-2004-x64
1bin/obf/Co...me.dll
windows7-x64
1bin/obf/Co...me.dll
windows10-2004-x64
1bin/obf/Teen.dll
windows7-x64
1bin/obf/Teen.dll
windows10-2004-x64
1bin/obf/dnlib.dll
windows7-x64
1bin/obf/dnlib.dll
windows10-2004-x64
1bin/packag...le.dll
windows7-x64
1bin/packag...le.dll
windows10-2004-x64
1bin/packag...le.dll
windows7-x64
1bin/packag...le.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ItroublveTSC.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ItroublveTSC.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
bin/App.xml
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
bin/App.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
bin/Binaries/RtkBtManServ.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
bin/Binaries/RtkBtManServ.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
bin/Program.js
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
bin/Program.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
bin/Properties/Resources.Designer.vbs
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
bin/Properties/Resources.Designer.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
bin/Properties/Resources.vbs
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
bin/Properties/Resources.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
bin/obf/CLI.exe
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
bin/obf/CLI.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
bin/obf/Confuser.Core.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
bin/obf/Confuser.Core.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
bin/obf/Confuser.DynCipher.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
bin/obf/Confuser.DynCipher.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
bin/obf/Confuser.Protections.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
bin/obf/Confuser.Protections.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
bin/obf/Confuser.Renamer.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
bin/obf/Confuser.Renamer.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
bin/obf/Confuser.Runtime.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
bin/obf/Confuser.Runtime.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
bin/obf/Teen.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
bin/obf/Teen.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
bin/obf/dnlib.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
bin/obf/dnlib.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/net46/System.IO.Compression.ZipFile.dll
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/net46/System.IO.Compression.ZipFile.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/netstandard1.3/System.IO.Compression.ZipFile.dll
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/netstandard1.3/System.IO.Compression.ZipFile.dll
Resource
win10v2004-20230220-en
Target
ItroublveTSC.6.1.3.rar
Size
5.0MB
MD5
19a38bd52bda9e8cb2c4d2c224aa8d37
SHA1
bee9ded4f4c56b16d6982cd38d064288dfc1922b
SHA256
a48a0c4989d0ef6044685ed4d76b8b52689e1dcb33c4ee96f11f8b493e2c2b6f
SHA512
bd06ca67104ec4c753f877aa7f1d9d82f29e416fba804ccf53bed91c2f04a2f832f984dd6cd7400063fe99835bae9fca1c030373d197ac6f76443762047341fa
SSDEEP
98304:Pgj1pQ9Buk5/3fPV3k2vXzt14m4cF/H8jJGXVE+su+zxvqG6Zb8WAdn4YJgj+2id:Pgn8rPfxkqj/4m9UjJKKPC3Z43f+j+x
resource | yara_rule |
---|---|
static1/unpack001/bin/Binaries/RtkBtManServ.exe | Nirsoft |
Password recovery tool for various web browsers
resource | yara_rule |
---|---|
static1/unpack001/bin/Binaries/RtkBtManServ.exe | WebBrowserPassView |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ