Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
Target
setup.zip
Size
70.8MB
MD5
8d7bc16ff561ed85458f948014b6e663
SHA1
f3749fd9b0fce4eb4ae1281f636533dc0297c476
SHA256
e3b0dfdea47495c8f3211bc48d8a3f2d30656c37f3c9dc2be72b89ee12a540ca
SHA512
7c59a136832721182c679008b0d33081f41ce6fdf50c075bbf0b3268c4853216e69d16df04d0290bca0d66c436559802d67135d9f5360a991a66fa3ba9b79721
SSDEEP
1572864:dLGlw9hr25LcuruWc1Uw1jV89W0SE3wcni/pCR+fDcZih1XR:dv90VrxcrK33wui/0Riqih1XR
Checks for missing Authenticode signature.
resource |
---|
unpack001/Resources/movant/praecox/unpleat/amd_comgr.dll |
unpack001/setup.exe |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
memset
strncmp
strcmp
_initterm_e
_initterm
_o__execute_onexit_table
_o__gmtime64_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__localtime64_s
_o__mktime64
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__strdup
_o__stricmp
_o___stdio_common_vswprintf
_o__strnicmp
memmove
_o__swab
_o__errno
_o_atoi
_o_calloc
_o_fclose
_o_fopen_s
_o_fread
_o_free
_o_fseek
_o_ftell
_o_isdigit
_o_isspace
_o_log
_o_malloc
_o_pow
_o_powf
_o_qsort
_o_sqrt
_o_strcat_s
_o_strcpy_s
_o_strftime
_o_strncpy_s
_o_terminate
_o_tolower
_o_toupper
_o_wmemcpy_s
__CxxFrameHandler3
_CxxThrowException
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsnprintf_s
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vfscanf
_o__aligned_malloc
_o__aligned_free
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___acrt_iob_func
__C_specific_handler
__std_terminate
__CxxFrameHandler4
_o___stdio_common_vswprintf_s
memchr
memcmp
memcpy
EnterCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSection
DeleteCriticalSection
AcquireSRWLockShared
LeaveCriticalSection
ReleaseSRWLockShared
InitializeSRWLock
CoTaskMemAlloc
PropVariantClear
CreateStreamOnHGlobal
PropVariantCopy
CoCreateInstance
LockResource
SizeofResource
DisableThreadLibraryCalls
LoadResource
FindResourceExW
MultiByteToWideChar
PropVariantCompareEx
PropVariantChangeType
PSCreateMemoryPropertyStore
VariantInit
SystemTimeToVariantTime
SetUnhandledExceptionFilter
GetLastError
RaiseException
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessorNumber
SHStrDupW
GetProcessHeap
HeapSize
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
QISearch
IntersectRect
CreateMultiProfileTransform
DeleteColorTransform
CloseColorProfile
TranslateBitmapBits
OpenColorProfileW
OutputDebugStringA
UnmapViewOfFile
CreateFileA
CloseHandle
GetSystemInfo
GetFileSizeEx
CreateFileMappingW
QueryPerformanceFrequency
CreateThreadpoolWork
SubmitThreadpoolWork
GetActiveProcessorCount
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
MapViewOfFile
CombineRgn
CreateRectRgn
GetRegionData
DeleteObject
GetRgnBox
CryptGenRandom
CryptAcquireContextW
CryptReleaseContext
ntohs
htonl
_time64
ResolveDelayLoadedAPI
DelayLoadFailureHook
logf
floorf
expf
ceilf
cosf
sqrtf
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExW
RegGetValueW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
WriteConsoleW
GetStdHandle
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceExA
GetDriveTypeW
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetVolumePathNameW
LockFileEx
ReadFile
SetFileInformationByHandle
SetFileTime
UnlockFileEx
CloseHandle
DuplicateHandle
GetLastError
SetLastError
Sleep
GetCurrentProcess
GetSystemInfo
GetSystemTime
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
MoveFileExW
CreateHardLinkW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
SearchPathW
WaitForSingleObject
GetProcessTimes
TerminateProcess
GetExitCodeProcess
ResumeThread
CreateProcessW
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
LocalFree
SetProcessAffinityMask
FormatMessageA
K32GetProcessMemoryInfo
RtlCaptureContext
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
SetErrorMode
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetProcAddress
LoadLibraryW
SetConsoleCtrlHandler
RaiseException
GetLogicalProcessorInformationEx
GetProcessGroupAffinity
SetThreadGroupAffinity
GetProcessAffinityMask
GetCommandLineW
GetSystemTimeAsFileTime
GetNativeSystemInfo
GetModuleHandleW
GetConsoleMode
SetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
FreeLibrary
K32EnumProcessModulesEx
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
GetLargePageMinimum
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExA
SetEnvironmentVariableW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
GetTimeZoneInformation
GetFileSizeEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
InitOnceBeginInitialize
InitOnceComplete
RtlPcToFileHeader
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetExitCodeThread
ReleaseSRWLockShared
AcquireSRWLockShared
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
InterlockedFlushSList
RtlUnwindEx
RtlUnwind
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
SetStdHandle
SetFilePointerEx
SetEndOfFile
HeapValidate
HeapWalk
WriteFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
HeapReAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
SysFreeString
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
amd_comgr_action_data_count
amd_comgr_action_data_get_data
amd_comgr_action_info_get_isa_name
amd_comgr_action_info_get_language
amd_comgr_action_info_get_logging
amd_comgr_action_info_get_option_list_count
amd_comgr_action_info_get_option_list_item
amd_comgr_action_info_get_options
amd_comgr_action_info_get_working_directory_path
amd_comgr_action_info_set_isa_name
amd_comgr_action_info_set_language
amd_comgr_action_info_set_logging
amd_comgr_action_info_set_option_list
amd_comgr_action_info_set_options
amd_comgr_action_info_set_working_directory_path
amd_comgr_create_action_info
amd_comgr_create_data
amd_comgr_create_data_set
amd_comgr_create_disassembly_info
amd_comgr_create_symbolizer_info
amd_comgr_data_set_add
amd_comgr_data_set_remove
amd_comgr_demangle_symbol_name
amd_comgr_destroy_action_info
amd_comgr_destroy_data_set
amd_comgr_destroy_disassembly_info
amd_comgr_destroy_metadata
amd_comgr_destroy_symbolizer_info
amd_comgr_disassemble_instruction
amd_comgr_do_action
amd_comgr_get_data
amd_comgr_get_data_isa_name
amd_comgr_get_data_kind
amd_comgr_get_data_metadata
amd_comgr_get_data_name
amd_comgr_get_isa_count
amd_comgr_get_isa_metadata
amd_comgr_get_isa_name
amd_comgr_get_metadata_kind
amd_comgr_get_metadata_list_size
amd_comgr_get_metadata_map_size
amd_comgr_get_metadata_string
amd_comgr_get_version
amd_comgr_index_list_metadata
amd_comgr_iterate_map_metadata
amd_comgr_iterate_symbols
amd_comgr_lookup_code_object
amd_comgr_metadata_lookup
amd_comgr_release_data
amd_comgr_set_data
amd_comgr_set_data_from_file_slice
amd_comgr_set_data_name
amd_comgr_status_string
amd_comgr_symbol_get_info
amd_comgr_symbol_lookup
amd_comgr_symbolize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetPointerCursorId
LoadLibraryExW
CreateFileW
VirtualProtect
FreeConsole
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
HeapSize
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
WriteConsoleW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetFileType
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ