Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Anti-Cheat Spoofer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Anti-Cheat Spoofer.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
mapper.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
mapper.exe
Resource
win10v2004-20230220-en
Target
Desktop.zip
Size
10.8MB
MD5
fb3208911969c98962efcd034fc57d01
SHA1
989d0372051c0775f152251191fc6ae6c0330d0e
SHA256
5b182a475964cc09a6aed3ca5bb9633779fcba1b096707525ff48234fa1fab16
SHA512
5dddd22f56239c7b82fcbe1d2f300962a9a8afc34f835b8ac902cd27a350e0be970d57aaa994632f812faa8557d424aef74b8e923bb4f77e3207d9046f30fa55
SSDEEP
196608:kBIKxMQZh9JzxFdw3cAPdmksVLz2RlNxO8G4U+TxpWUjPm2mpGH0sH+ZFXwB6/zb:khDbicpWlr1G4U0WUj+2r0s8FXwB6L1V
Checks for missing Authenticode signature.
resource |
---|
unpack001/mapper.dll |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
�@�#v�� m5����ȹ�oh�~oR���bi[�P4��?34�i"nX�D�%CW��}<��?�X��#_��+D���K�z>#���q �C�Λ�9��8�۵��ÿF5�VQm�f ބ�_~h�d���;��]}�q�㦍��&��Dou>��8����W8P�x���6ֈ�G&����>��Q�i��2"�љ`���y�"`��+�R�'��� ?t7����Zfñ |�/̫H#7���R�S9.n�n �8B�1��-MKKi�5��=ĉ�6���c3f��A\�a�/3���A�_��l�����c9�A9.�k�[&!�xڿ�⦆�O)��������nd�3o�J��D66g��D�LW�O9W��nm����S��;��6U�~��A�� En�|IruN 8h�mbP�`�ݐԼ����0o�ӱ8��k���������&�����%�d`��i�ρ �Ǐ�N��V����HT�"�������m,b� ������iPT ֧�����/��e��P�-�`�b:l`�]��D�{1�i&����*u��W�|��ac��ď{%Y��L�����~GL��������Zhh��G����o^<�*��bՏ���7N�D�Ӊ��ٙ�J��ܦV�j��O]���qك����ׇ��*��8禶ȹu���sdqp�>�����,�m��� ,���0mӧO>��u�$��v~B��l�������*C�"��m�S�-��� >��Q��1 )�O��LGg���6E�H�K�Z����0�V?�4!%�j�X�4��I,#����|��(i�dsk�gߎ����}�O)���!8T�"����7����Wwa�;���QJ<� �\#e�,H�P4(c���9���S����x�]��@Ut�4�U=��Li���9Ό~�.?�a/D�����]�K>�ϱ��oʔZ��}i���>�&��q��5l����:�qO5q1�����V���]�OԤ���W5I�����Z!���� L��s�O��i�`�cp ¬ޑ�ƛ< ��Yv��7����DQBAq=�*�%�3�č�3O9Xg�LJ��N�Q� �Q����ڦ��V��3�Ia��UN#:�R<�29O�]���]v�/����c�O���q�0�o8��ٴ;w��Q~����S�fY�OU 7�FY��!����Et�[�n�;�=���7u��B���"; %�t����BM�V�CtC�����c���I���2'�%���#z���y�.q��� �ן:Ӱ��4�M� dȇ�J�D�k8W+��b�4; }%��A�,�ù^=���y�WZQ,�j��Y ���PN�3<��̧�D��1��D�(Ih�У.g7��UBk�2��p�¡�O7ؘ"L������(�6���o�gd��78��D�� '����d���y�&�_tz½����D>����ɵ|�� ݅��� �(��7��H��� t��],W[@.��}anP�>����P��k����{�N5�Zcwq���l�a���5_���*E�sؖ�A�[/k:���O]L���m�yI%FU���Vx�|���zsg�Rw:�?<��������ι,�����X'$��R* �. �}������+i��~hM���w�lJ����N��oXi9��O�|ߧe3�9 +���+Z��y�V/�����W#�� � LM'��m���O;����3�ΰ��:+y"b��E��-m��|�V�h�y��(ST7�9��݀�{� �dP�kP� UWߥ�|�{zl����;��*WI ��.��p,;��KQ|����B/�w�zC�&c���^��I���ɼԾ\)ՙ����tn�L!N`�o��%ZUaU�X���"�F��!e�7p* QXN����� �.��x��;��x�<#)�m��AM�oX�s�S*%�4*0�7���3�]�8���s���O�#�e�p��(*�"`���A�B(7#DJ�Vj��Ş��TŤ�`*p�h�d�7�J�*k�٫4cL�V(��Z��8�@��mfo�O�ט}\�I� ��3]�f~�����mi����!f�R*���������+����M[ԯ����s���d$9����Xt ���*���"ܼ�t��C?�?U�ѱ�U*̹J:z�m"�V��Z�LU��%fu��K�v/��z�)k�Yn�����V���f�+'~M,��{�s�4Wɹ�Z�W-�ݔh�,To���b���h�:� Cq��g��Ȣ����C�^��t(1�#�! w ��ۍ�1B�Uu�y����7��!C�#Hʚ�$GT2y9��s�VQ}qJA��K�3.j4���1�QZ�UXwE�"�N�����>I�����8,�M캯���O��Ǟ.c��v�� v�N�C�MW��͔�>2\�/E])�2��9U��E������{�Z�F�=���l���|���=50��QKBv����\8ò��k�� ��zo��PF�z���*����u��t#sg�-,s� ~xh�g��X���78�x�_m��:����ћ��L �.�7��)���t����ᓮo�6�C�'.��)�&�b�"��rfj�u�^<��OפnyH�nMJ\�"������Iɻ�Z�&� h���%v�X6 �Uo��E9�s{o>�-���ѥ���r��#vL�5uK{9&��!;R����r�9�v�оlx�`O� �RցYk��ز�y� 1'��5�1=x5�ޭ9s5!���6G0���,y�'Dk�Nܒ~3[T�ojC�5tx1q��b�}��4����4F n�Z����������n�]K�2�`w�xV|�-�ϋ�{'��$��p;�gJ���H�[������Q�8�v�x�L2�NX��� ��&ZD'��k"��,I��,�Uw �������~rJXh"i=�v?�e����+�@ʓO�v����(F�b�͡�oXsV6��Boyx��*��e�Qj,���K�F;�e��M�#�,��� �Ui �R����<��� L\��0�>BS�H�E6�<��6״�:gVv�Ӽ�ƞ2H�������ؿ��{]�}��"7{�b�B�7k3-� �8Q�B�;���!Q��S��y%X�0�92f��;���ZQ�䡅��� �v��~�}8q�E�rѱ��v&xK��ȇ���C��?UůM���t~������{K����E8��ߪ�d�Q�ǓrF�f0?e��#��OeK�a�kPu�-��suDУ.:˓9 �l���d:sNߜQ�}�,U(�;x�T�^=f2 ҟX��J�6ʹ����
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ