Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0ecc8f263b594d9ee75df71decc4734df6af7146d2cb1af434501f68299ebcc1.exe
Resource
win10-20231023-en
Behavioral task
behavioral2
Sample
2d8e052bb93839dffe77b45be4418f64eeae35a7470a3c20827bae914dc1c7e4.exe
Resource
win10-20231020-en
Behavioral task
behavioral3
Sample
91f6fdf97a9aab278ec63156a8deeca616abb968c81a14dc5713d9918f7eeb75.exe
Resource
win10-20231020-en
Behavioral task
behavioral4
Sample
9239c19692bdd4b0fda67acf4a2ad9de234ecdfcf213520dd22f41b32845074c.dll
Resource
win10-20231023-en
Behavioral task
behavioral5
Sample
d7044a35e76543a03cd343d71652c7bbd9a28e246d7f3a43f4a2e75cd0ef7366.dll
Resource
win10-20231020-en
Behavioral task
behavioral6
Sample
e8cab3ac78058b0c9227859d4c23eec674950aba0975f3611fa9895ab94e3b1d.exe
Resource
win10-20231023-en
Target
WinX.HiddenCobra.Supply.zip
Size
3.8MB
MD5
86e65806c9bcd187efd2be734e76626e
SHA1
f1deabf57089696831f18d3763bb3e020e552925
SHA256
6f85d77d2fce05d031c6f03e9ae535e2c09aa7ecfa48588c80a461b7d8bbfaf5
SHA512
f949edfa684d1a74d60729d51a7c05453c6b1ea5779dfa0e27ed8e7b253aff208821ecfbcf09a675f24d16c2df0e15127b7a2c228c8be917e6137bfb3d9ba7f0
SSDEEP
98304:qKDgN/vJrT5EtVrlOSJCYQXTbXfLgLzcppvpGSXtJVfWR0Jk:3gN/vJ5EtS/XfELJSdJPJk
Checks for missing Authenticode signature.
resource |
---|
unpack002/2d8e052bb93839dffe77b45be4418f64eeae35a7470a3c20827bae914dc1c7e4 |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
lstrcpy
InitCommonControls
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetVersionExA
WinExec
sprintf
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
lstrcpy
InitCommonControls
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
TerminateThread
FileTimeToSystemTime
SetCurrentDirectoryA
FindFirstFileA
FindClose
FindNextFileA
GetCurrentDirectoryA
CreateRemoteThread
OpenProcess
GetModuleHandleA
GetFileSize
SetFilePointer
VirtualFree
ReadFile
GetTickCount
GetFileAttributesA
CreateProcessA
TerminateProcess
MoveFileExA
DeviceIoControl
CreateThread
GetDriveTypeA
GetLocalTime
ExitThread
SetUnhandledExceptionFilter
SetFileTime
GetExitCodeProcess
FlushFileBuffers
GetFileTime
GetDiskFreeSpaceExA
OpenFileMappingA
GetVersionExA
ReleaseMutex
CreateMutexA
Sleep
WaitForSingleObject
UnmapViewOfFile
MapViewOfFile
GetModuleFileNameA
DeleteFileA
CloseHandle
GetTempFileNameA
WriteFile
ExpandEnvironmentStringsA
GetProcessHeap
HeapFree
HeapAlloc
CreateFileA
LocalFree
GetTempPathA
WriteConsoleA
WinExec
LocalAlloc
GetEnvironmentVariableA
GetComputerNameA
SetLastError
IsValidCodePage
InitializeCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetLastError
GetLogicalDrives
GetCPInfo
SetStdHandle
GetStartupInfoA
SetHandleCount
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
HeapSize
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
SetErrorMode
ExitProcess
FreeLibrary
DuplicateHandle
GetCurrentProcess
CreateEventA
SetEvent
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
FormatMessageA
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
MultiByteToWideChar
HeapReAlloc
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetEndOfFile
FileTimeToLocalFileTime
GetCurrentThreadId
GetCommandLineA
RtlUnwind
RaiseException
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
LoadLibraryW
HeapCreate
HeapDestroy
DeleteCriticalSection
VirtualAlloc
GetConsoleOutputCP
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateDCA
DeleteObject
GetDIBColorTable
RegDeleteKeyA
CryptReleaseContext
CryptAcquireContextA
CryptGenRandom
GetUserNameA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
ord680
DnsFree
DnsQuery_A
connect
getpeername
recvfrom
sendto
WSARecv
htonl
WSASend
ntohl
ntohs
WSAGetLastError
WSACleanup
getnameinfo
gethostbyname
inet_addr
inet_ntoa
bind
recv
send
setsockopt
WSAStartup
htons
getsockname
socket
closesocket
gethostname
EnumProcesses
EnumProcessModules
GetModuleFileNameExA
GetNumberOfInterfaces
GetAdaptersInfo
GdiplusShutdown
GdipFree
GdipLoadImageFromFile
GdipAlloc
GdipGetImageEncodersSize
GdipDisposeImage
GdipGetImageEncoders
GdipSaveImageToFile
GdipCloneImage
GdiplusStartup
ord214
ord44
ord67
MessageBoxA
??0CCC@@QAE@ABV0@@Z
??0CUDT@@AAE@ABV0@@Z
??0CUDT@@AAE@XZ
??0CUDTException@@QAE@ABV0@@Z
??0CUDTException@@QAE@HHH@Z
??1CCC@@UAE@XZ
??1CUDT@@AAE@XZ
??1CUDTException@@UAE@XZ
??4CCC@@QAEAAV0@ABV0@@Z
??4CPerfMon@@QAEAAU0@ABU0@@Z
??4CUDT@@AAEABV0@ABV0@@Z
??4CUDTException@@QAEAAV0@ABV0@@Z
??_7CCC@@6B@
??_7CUDTException@@6B@
??_FCUDTException@@QAEXXZ
?ERROR@CUDT@@2HB
?ERROR@UDT@@3HB
?INVALID_SOCK@CUDT@@2HB
?INVALID_SOCK@UDT@@3HB
?accept@CUDT@@SAHHPAUsockaddr@@PAH@Z
?accept@UDT@@YAHHPAUsockaddr@@PAH@Z
?bind@CUDT@@SAHHPBUsockaddr@@H@Z
?bind@UDT@@YAHHPBUsockaddr@@H@Z
?close@CCC@@UAEXXZ
?close@CUDT@@AAEXXZ
?close@CUDT@@SAHH@Z
?close@UDT@@YAHH@Z
?connect@CUDT@@AAEXPBUsockaddr@@@Z
?connect@CUDT@@AAEXPBUsockaddr@@PAUCHandShake@@@Z
?connect@CUDT@@SAHHPBUsockaddr@@H@Z
?connect@UDT@@YAHHPBUsockaddr@@H@Z
?destroySynch@CUDT@@AAEXXZ
?flowControl@CUDT@@AAEXABH@Z
?getErrorCode@CUDTException@@UBE?BHXZ
?getErrorMessage@CUDTException@@UAEPBDXZ
?getOpt@CUDT@@AAEXW4UDTOpt@@PAXAAH@Z
?getOverlappedResult@CUDT@@AAE_NABHAAHAB_N@Z
?getUDTHandle@CUDT@@SAPAV1@H@Z
?getlasterror@CUDT@@SAAAVCUDTException@@XZ
?getlasterror@UDT@@YA?AVCUDTException@@XZ
?getoverlappedresult@CUDT@@SA_NHHAAH_N@Z
?getoverlappedresult@UDT@@YA_NHHAAH_N@Z
?getpeername@CUDT@@SAHHPAUsockaddr@@PAH@Z
?getpeername@UDT@@YAHHPAUsockaddr@@PAH@Z
?getsockname@CUDT@@SAHHPAUsockaddr@@PAH@Z
?getsockname@UDT@@YAHHPAUsockaddr@@PAH@Z
?getsockopt@CUDT@@SAHHHW4UDTOpt@@PAXPAH@Z
?getsockopt@UDT@@YAHHHW4UDTOpt@@PAXPAH@Z
?init@CCC@@UAEXXZ
?initSynch@CUDT@@AAEXXZ
?isUSock@CUDT@@SA_NH@Z
?listen@CUDT@@AAEXXZ
?listen@CUDT@@SAHHH@Z
?listen@UDT@@YAHHH@Z
?listenHandler@CUDT@@CGKPAX@Z
?onACK@CCC@@UAEXABH@Z
?onLoss@CCC@@UAEXPBHABH@Z
?onPktReceived@CCC@@UAEXPBVCPacket@@@Z
?onPktSent@CCC@@UAEXPBVCPacket@@@Z
?onTimeout@CCC@@UAEXXZ
?open@CUDT@@AAEXPBUsockaddr@@@Z
?perfmon@CUDT@@SAHHPAUCPerfMon@@_N@Z
?perfmon@UDT@@YAHHPAUCPerfMon@@_N@Z
?processCtrl@CUDT@@AAEXAAVCPacket@@@Z
?processCustomMsg@CCC@@UAEXPBVCPacket@@@Z
?rateControl@CUDT@@AAEXXZ
?rcvHandler@CUDT@@CGKPAX@Z
?recv@CUDT@@AAEHPADABHPAHQ6AX0HPAX@Z3@Z
?recv@CUDT@@SAHHPADHHPAHP6AX0HPAX@Z2@Z
?recv@UDT@@YAHHPADHHPAHP6AX0HPAX@Z2@Z
?recvfile@CUDT@@AAE_JAAV?$basic_ofstream@DU?$char_traits@D@std@@@std@@AB_J1ABH@Z
?recvfile@CUDT@@SA_JHAAV?$basic_ofstream@DU?$char_traits@D@std@@@std@@AB_J1ABH@Z
?recvfile@UDT@@YA_JHAAV?$basic_ofstream@DU?$char_traits@D@std@@@std@@AB_J1ABH@Z
?recvmsg@CUDT@@AAEHPADABH@Z
?recvmsg@CUDT@@SAHHPADH@Z
?recvmsg@UDT@@YAHHPADH@Z
?releaseSynch@CUDT@@AAEXXZ
?s_UDTUnited@CUDT@@0VCUDTUnited@@A
?sample@CUDT@@AAEXPAUCPerfMon@@_N@Z
?select@CUDT@@SAHHPAV?$set@HU?$less@H@std@@V?$allocator@H@2@@std@@00PBUtimeval@@@Z
?select@UDT@@YAHHPAV?$set@HU?$less@H@std@@V?$allocator@H@2@@std@@00PBUtimeval@@@Z
?send@CUDT@@AAEHPADABHPAHQ6AX0HPAX@Z3@Z
?send@CUDT@@SAHHPBDHHPAHP6AXPADHPAX@Z3@Z
?send@UDT@@YAHHPBDHHPAHP6AXPADHPAX@Z3@Z
?sendCtrl@CUDT@@AAEXABHPAX10@Z
?sendfile@CUDT@@AAE_JAAV?$basic_ifstream@DU?$char_traits@D@std@@@std@@AB_J1ABH@Z
?sendfile@CUDT@@SA_JHAAV?$basic_ifstream@DU?$char_traits@D@std@@@std@@AB_J1ABH@Z
?sendfile@UDT@@YA_JHAAV?$basic_ifstream@DU?$char_traits@D@std@@@std@@AB_J1ABH@Z
?sendmsg@CUDT@@AAEHPBDABH1AB_N@Z
?sendmsg@CUDT@@SAHHPBDHH_N@Z
?sendmsg@UDT@@YAHHPBDHH_N@Z
?setOpt@CUDT@@AAEXW4UDTOpt@@PBXABH@Z
?setsockopt@CUDT@@SAHHHW4UDTOpt@@PBXH@Z
?setsockopt@UDT@@YAHHHW4UDTOpt@@PBXH@Z
?shutdown@CUDT@@SAHHH@Z
?shutdown@UDT@@YAHHH@Z
?sndHandler@CUDT@@CGKPAX@Z
?socket@CUDT@@SAHHHH@Z
?socket@UDT@@YAHHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
lstrcpyA
GetTickCount
lstrlenA
LoadLibraryA
GetProcAddress
GetModuleHandleA
_lclose
_lread
_lopen
_lwrite
_llseek
lstrcpynA
SetFilePointer
GetVersionExA
Sleep
wsprintfA
ShowWindow
EndDialog
DefWindowProcA
DialogBoxParamA
PathFileExistsA
_adjust_fdiv
malloc
_initterm
free
memcmp
rand
srand
memcpy
memset
atoi
strcat
strcpy
strchr
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
lstrcpy
InitCommonControls
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE