ResumAI[.]zip | Triage

resource	yara_rule
static1/unpack001/ResumAI/resumA.I.exe	pyinstaller

ResumAI.zip

.zip

Readme.txt

ResumAI/Readme.txt

ResumAI/resumA.I.exe

.exe windows:5 windows x64

0b5552dccd9d0a834cea55c0c8fc05be

Code Sign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3d:f0:56:10:77:23:04:69:76:65:3e:c4:57:1e:8a:a4
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-02-2021 00:00

Not After

03-02-2024 23:59

Subject

CN=MiniTool Software Limited,O=MiniTool Software Limited,STREET=Kowloon+STREET=Harbour City\, 5 Canton Road\, Tsim Sha Tsui+STREET=Suite 820\, 8 Floor\, Ocean Centre,L=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0b:f2:7e:02:16:d6:11:67:61:44:26:8a:46:e4:35:35:21:21:27:76:13:ec:1a:50:66:da:03:e9:03:08:22:80
Signer

Actual PE Digest

0b:f2:7e:02:16:d6:11:67:61:44:26:8a:46:e4:35:35:21:21:27:76:13:ec:1a:50:66:da:03:e9:03:08:22:80

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CreateWindowExW

MessageBoxW

MessageBoxA

SystemParametersInfoW

DestroyIcon

SetWindowLongPtrW

GetWindowLongPtrW

GetClientRect

InvalidateRect

ReleaseDC

GetDC

DrawTextW

GetDialogBaseUnits

EndDialog

DialogBoxIndirectParamW

MoveWindow

SendMessageW

comctl32

ord380

kernel32

GetStringTypeW

GetFileAttributesExW

HeapReAlloc

FlushFileBuffers

GetCurrentDirectoryW

IsValidCodePage

GetACP

GetModuleHandleW

MulDiv

GetLastError

SetDllDirectoryW

GetModuleFileNameW

GetProcAddress

GetCommandLineW

GetEnvironmentVariableW

GetOEMCP

ExpandEnvironmentStringsW

CreateDirectoryW

GetTempPathW

WaitForSingleObject

Sleep

GetExitCodeProcess

CreateProcessW

GetStartupInfoW

FreeLibrary

LoadLibraryExW

SetConsoleCtrlHandler

FindClose

FindFirstFileExW

CloseHandle

GetCurrentProcess

LocalFree

FormatMessageW

MultiByteToWideChar

WideCharToMultiByte

GetCPInfo

GetEnvironmentStringsW

FreeEnvironmentStringsW

GetProcessHeap

GetTimeZoneInformation

HeapSize

WriteConsoleW

SetEnvironmentVariableW

RtlUnwindEx

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

SetEndOfFile

SetLastError

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

EncodePointer

RaiseException

RtlPcToFileHeader

GetCommandLineA

CreateFileW

GetDriveTypeW

GetFileInformationByHandle

GetFileType

PeekNamedPipe

SystemTimeToTzSpecificLocalTime

FileTimeToSystemTime

GetFullPathNameW

RemoveDirectoryW

FindNextFileW

SetStdHandle

DeleteFileW

ReadFile

GetStdHandle

WriteFile

ExitProcess

GetModuleHandleExW

HeapFree

GetConsoleMode

ReadConsoleW

SetFilePointerEx

GetConsoleOutputCP

GetFileSizeEx

HeapAlloc

FlsAlloc

FlsGetValue

FlsSetValue

FlsFree

CompareStringW

LCMapStringW

advapi32

OpenProcessToken

GetTokenInformation

ConvertStringSecurityDescriptorToSecurityDescriptorW

ConvertSidToStringSidW

gdi32

SelectObject

DeleteObject

CreateFontIndirectW

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ