Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Overview
overview
10Static
static
3VN[5A47C50...op.lnk
windows7-x64
10VN[5A47C50...op.lnk
windows10-2004-x64
10VN[5A47C50.../D.doc
windows7-x64
4VN[5A47C50.../D.doc
windows10-2004-x64
1VN[5A47C50.../D.doc
windows7-x64
4VN[5A47C50.../D.doc
windows10-2004-x64
1VN[5A47C50...me.exe
windows7-x64
10VN[5A47C50...me.exe
windows10-2004-x64
10VN[5A47C50.../D.doc
windows7-x64
4VN[5A47C50.../D.doc
windows10-2004-x64
1VN[5A47C50...D.docx
windows7-x64
4VN[5A47C50...D.docx
windows10-2004-x64
1VN[5A47C50.../D.doc
windows7-x64
4VN[5A47C50.../D.doc
windows10-2004-x64
1VN[5A47C50...jb.doc
windows7-x64
4VN[5A47C50...jb.doc
windows10-2004-x64
1VN[5A47C50...ot.dll
windows7-x64
1VN[5A47C50...ot.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Desktop.lnk
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Desktop.lnk
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.doc
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.doc
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.doc
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/Readme.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/Readme.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.doc
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.docx
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.docx
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.doc
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/D.doc
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/depart jb.doc
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/depart jb.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Screenshot.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Screenshot.dll
Resource
win10v2004-20230220-en
Target
VN5A47C5033DE383D1B898CF239AAB2C39_2022_04_12T08_19_01_2571075.rar
Size
5.2MB
MD5
10976818be3e1bb043e60db1b9d8a75d
SHA1
b88569b3816e277d206ca96685e9e535b60e63f2
SHA256
0709ad3fc66bb5d08ad8f0cf7a542366ae50439d0b52331156fe7d2480ea3f5e
SHA512
01ab99a147fe1402836fa8757bc7d8e6650e5c830b4c9d3f274a94b6b9626b207ddd1d46e641aae4e37d6af9026d6584e99093db4edc503b1af7c900c45fd450
SSDEEP
98304:RaDMdL8mO8HSX2Wfz1kHqaA1F5v8tHxJDqvsz+Y9PBWjVZxm37Tmh:RaDMmmtSXf71xaA50rJgjY9ZWjVg+h
Checks for missing Authenticode signature.
resource |
---|
unpack001/VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/Readme.txt |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
CN=Artem Shevchenko,O=Artem Shevchenko,POSTALCODE=04050,STREET=Melnikova st. 15\, 5 apt.,L=Kiev,ST=Kiev,C=UA
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?staticMetaObject@QBearerEngine@@2UQMetaObject@@B
?qt_metacall@QBearerEngine@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QBearerEngine@@UAEPAXPBD@Z
?staticMetaObject@QNetworkSessionPrivate@@2UQMetaObject@@B
?qt_metacall@QNetworkSessionPrivate@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QNetworkSessionPrivate@@UAEPAXPBD@Z
?staticMetaObject@QBearerEnginePlugin@@2UQMetaObject@@B
??1QBearerEnginePlugin@@UAE@XZ
??0QBearerEnginePlugin@@QAE@PAVQObject@@@Z
?qt_metacall@QBearerEnginePlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QBearerEnginePlugin@@UAEPAXPBD@Z
?usagePoliciesChanged@QNetworkSessionPrivate@@QAEXV?$QFlags@W4UsagePolicy@QNetworkSession@@@@@Z
?newConfigurationActivated@QNetworkSessionPrivate@@QAEXXZ
?closed@QNetworkSessionPrivate@@QAEXXZ
?stateChanged@QNetworkSessionPrivate@@QAEXW4State@QNetworkSession@@@Z
?error@QNetworkSessionPrivate@@QAEXW4SessionError@QNetworkSession@@@Z
?quitPendingWaitsForOpened@QNetworkSessionPrivate@@QAEXXZ
?qNetworkConfigurationManagerPrivate@@YAPAVQNetworkConfigurationManagerPrivate@@XZ
?engines@QNetworkConfigurationManagerPrivate@@QBE?AV?$QList@PAVQBearerEngine@@@@XZ
?interfaceFromName@QNetworkInterface@@SA?AV1@ABVQString@@@Z
??0QNetworkInterface@@QAE@XZ
?isValid@QNetworkConfiguration@@QBE_NXZ
?children@QNetworkConfiguration@@QBE?AV?$QList@VQNetworkConfiguration@@@@XZ
?identifier@QNetworkConfiguration@@QBE?AVQString@@XZ
?type@QNetworkConfiguration@@QBE?AW4Type@1@XZ
?state@QNetworkConfiguration@@QBE?AV?$QFlags@W4StateFlag@QNetworkConfiguration@@@@XZ
??8QNetworkConfiguration@@QBE_NABV0@@Z
??1QNetworkConfiguration@@QAE@XZ
??4QNetworkConfiguration@@QAEAAV0@ABV0@@Z
??0QNetworkConfiguration@@QAE@ABV0@@Z
??0QNetworkConfiguration@@QAE@XZ
?setALREnabled@QNetworkSessionPrivate@@UAEX_N@Z
?requiresPolling@QBearerEngine@@UBE_NXZ
??1QNetworkSessionPrivate@@UAE@XZ
??0QNetworkSessionPrivate@@QAE@XZ
?updateCompleted@QBearerEngine@@QAEXXZ
?configurationChanged@QBearerEngine@@QAEXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
?configurationRemoved@QBearerEngine@@QAEXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
?configurationAdded@QBearerEngine@@QAEXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
??1QBearerEngine@@UAE@XZ
??0QBearerEngine@@QAE@PAVQObject@@@Z
?allInterfaces@QNetworkInterface@@SA?AV?$QList@VQNetworkInterface@@@@XZ
?interfaceFromIndex@QNetworkInterface@@SA?AV1@H@Z
?addressEntries@QNetworkInterface@@QBE?AV?$QList@VQNetworkAddressEntry@@@@XZ
?hardwareAddress@QNetworkInterface@@QBE?AVQString@@XZ
?flags@QNetworkInterface@@QBE?AV?$QFlags@W4InterfaceFlag@QNetworkInterface@@@@XZ
?humanReadableName@QNetworkInterface@@QBE?AVQString@@XZ
?name@QNetworkInterface@@QBE?AVQString@@XZ
?index@QNetworkInterface@@QBEHXZ
?isValid@QNetworkInterface@@QBE_NXZ
??1QNetworkInterface@@QAE@XZ
??0QNetworkInterface@@QAE@ABV0@@Z
??1QNetworkAddressEntry@@QAE@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?currentDateTimeUtc@QDateTime@@SA?AV1@XZ
?toTime_t@QDateTime@@QBEIXZ
??1QDateTime@@QAE@XZ
?toInt@QVariant@@QBEHPA_N@Z
??0QVariant@@QAE@H@Z
??0QVariant@@QAE@XZ
?disconnect@QObject@@SA_NPBV1@PBD01@Z
??0QMutex@@QAE@W4RecursionMode@0@@Z
??1QMutex@@QAE@XZ
?lock@QMutex@@QAEXXZ
?unlock@QMutex@@QAEXXZ
?unlock@QMutexLocker@@QAEXXZ
?relock@QMutexLocker@@QAEXXZ
??0QChar@@QAE@UQLatin1Char@@@Z
?qHash@@YAIABVQString@@I@Z
?detach@QListData@@QAEPAUData@1@H@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?realloc@QListData@@QAEXH@Z
?dispose@QListData@@SAXPAUData@1@@Z
?erase@QListData@@QAEPAPAXPAPAX@Z
?append@QListData@@QAEPAPAXXZ
??0QString@@QAE@XZ
??0QString@@QAE@VQLatin1String@@@Z
??0QString@@QAE@ABV0@@Z
??1QString@@QAE@XZ
??4QString@@QAEAAV0@ABV0@@Z
??4QString@@QAEAAV0@$$QAV0@@Z
?arg@QString@@QBE?AV1@ABV1@HVQChar@@@Z
?append@QString@@QAEAAV1@ABV1@@Z
?utf16@QString@@QBEPBGXZ
?fromLatin1@QString@@SA?AV1@PBDH@Z
?number@QString@@SA?AV1@HH@Z
?number@QString@@SA?AV1@IH@Z
??8@YA_NABVQString@@0@Z
??M@YA_NABVQString@@0@Z
?allocateNode@QHashData@@QAEPAXH@Z
?freeNode@QHashData@@QAEXPAX@Z
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?hasShrunk@QHashData@@QAEXXZ
?rehash@QHashData@@QAEXH@Z
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z
??0QSharedData@@QAE@XZ
?freeNodeAndRebalance@QMapDataBase@@QAEXPAUQMapNodeBase@@@Z
?recalcMostLeftNode@QMapDataBase@@QAEXXZ
?createNode@QMapDataBase@@QAEPAUQMapNodeBase@@HHPAU2@_N@Z
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z
?createData@QMapDataBase@@SAPAU1@XZ
?freeData@QMapDataBase@@SAXPAU1@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?shared_null@QListData@@2UData@1@B
?shared_null@QMapDataBase@@2U1@B
??1QByteArray@@QAE@XZ
??8QString@@QBE_NVQLatin1String@@@Z
?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z
?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PBD@Z
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
??1Connection@QMetaObject@@QAE@XZ
?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?qt_metacast@QObject@@UAEPAXPBD@Z
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
??0QObject@@QAE@PAV0@@Z
??1QObject@@UAE@XZ
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
_initterm_e
_initterm
_except_handler4_common
free
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
memcpy
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
?terminate@@YAXXZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__clean_type_info_names_internal
_malloc_crt
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
DeviceIoControl
CloseHandle
CreateFileW
qt_plugin_instance
qt_plugin_query_metadata
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ