Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
SETUPC~1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SETUPC~1.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
setup.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
setup.exe
Resource
win10v2004-20231215-en
Target
06b9e62ea3cb31939050a5fc86e1ee1a
Size
309KB
MD5
06b9e62ea3cb31939050a5fc86e1ee1a
SHA1
9eb8e7c32a7b0bc3ef20ffab05d4b482d6df9405
SHA256
e960d0f3d55da7af7f3087b5575c78d11ae2fc7e0a1cac5ef5f5cba98f27e88e
SHA512
0c9f9fe2927243097c201155198f27a16c6c1a925786fa78f2f8051e2a3810f27e37e46f5722b97e16a7cc5a362c8d8b27905f874d4e7f8d9a98eda05e767d85
SSDEEP
6144:IZwWnuRuUHPYR73dTnB+nGmLx88XrvEzg5YkmU4a5U9QsSUpaocaTlHSoITFTr+1:IZwWguUHa73dTnBuG6xPXrgkgJFSGABg
Checks for missing Authenticode signature.
resource |
---|
unpack001/setup.exe |
resource | yara_rule |
---|---|
static1/unpack001/setup.exe | nsis_installer_2 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?Script_FeatureSelectionChanged@@YGIUCXML_FEATURE_DATA@@@Z
?Script_AfterExecuteChainInstall@@YGIP6AHIPB_WZZ@Z
?Script_AfterExecuteChainAdmin@@YGIP6AHIPB_WZZ@Z
?Script_BeforeExecuteChainInstall@@YGIP6AHIPB_WZZ@Z
?Script_BeforeExecuteChainAdmin@@YGIP6AHIPB_WZZ@Z
?Script_AfterSetupInitialization@@YGIP6AHIPB_WZZ@Z
?Script_UIProgressStart@@YGIP6AHIPB_WZZ@Z
?Script_UIWizardStart@@YGIP6AHIPB_WZZ@Z
?Script_UIWizardCompleteError@@YGIP6AHIPB_WZZ@Z
?Script_UIWizardCompleteSuccess@@YGIP6AHIPB_WZZ@Z
?Script_UIWizardCompleteReboot@@YGIP6AHIPB_WZZ@Z
ord88
ord113
ord34
ord74
ord145
ord49
ord190
ord159
ord160
ord118
ord158
ord169
ord43
ord111
ord137
ord141
ord8
ord32
ord94
ord96
ord133
RpcStringFreeW
UuidToStringW
?SelectNodes@CXMLFileManagerInterface@@QAEJPB_W@Z
?CounterLast@CXMLFileManagerInterface@@QAEJXZ
?Initialize@CXMLFileManagerInterface@@QAEJXZ
?UnInitialize@CXMLFileManagerInterface@@QAEXXZ
?CreateXML@CXMLFileManagerInterface@@QAEJPB_W@Z
?SetFileIndex@CXMLFileManagerInterface@@QAEXW4XMLFILENAMES@@@Z
?Saveit@CXMLFileManagerInterface@@QAEJPB_W@Z
?AddNodeAsChild@CXMLFileManagerInterface@@QAE_NPB_W@Z
?SetAttribute@CXMLFileManagerInterface@@QAE_NPB_W0@Z
?GetParentAttribute@CXMLFileManagerInterface@@QAEIPB_WPA_WPAK@Z
??0CXMLFileManagerInterface@@QAE@XZ
??1CXMLFileManagerInterface@@UAE@XZ
?GetAttribute@CXMLFileManagerInterface@@QAEIPB_WPA_WPAK@Z
?GetAttributeSingleNode@CXMLFileManagerInterface@@QAEIPB_W0PA_WPAK@Z
?SetAttributeSingleNode@CXMLFileManagerInterface@@QAE_NPB_W00@Z
?AddNodeToEndOfList@CXMLFileManagerInterface@@QAE_NPB_W@Z
?IsXMLLoaded@CXMLFileManagerInterface@@QAE_NXZ
?GetFeatureData@CXMLFileManagerInterface@@QAE_NPB_WPAUCXML_FEATURE_DATA@@@Z
?GetFeatureData@CXMLFileManagerInterface@@QAE_NHPAUCXML_FEATURE_DATA@@@Z
?ToggleCheck@CXMLFileManagerInterface@@QAEXH_N@Z
?ToggleCheck@CXMLFileManagerInterface@@QAEXPB_W_N@Z
?RemoveAll@CXMLFileManagerInterface@@QAEJPB_W@Z
?SetFeatureData@CXMLFileManagerInterface@@QAE_NUCXML_FEATURE_DATA@@@Z
?CounterNext@CXMLFileManagerInterface@@QAEJXZ
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
MulDiv
GlobalUnlock
GlobalFree
SetThreadPriority
SuspendThread
GlobalAddAtomW
GetCurrentProcessId
FreeResource
InterlockedDecrement
GetVersionExA
LoadLibraryA
CompareStringW
GlobalFindAtomW
GetModuleHandleA
RaiseException
lstrlenA
FindClose
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
CreateFileW
SetFileAttributesW
GetFileAttributesW
GetFileSize
lstrcmpA
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalFlags
WritePrivateProfileStringW
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
SetErrorMode
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
Process32NextW
Module32NextW
Module32FirstW
Process32FirstW
CreateToolhelp32Snapshot
CopyFileExW
GetTempPathW
LocalFree
FormatMessageW
CreateProcessW
WaitForSingleObject
CreateDirectoryW
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
GetDiskFreeSpaceExW
GetModuleHandleW
SetLastError
GetExitCodeThread
Sleep
ResumeThread
RemoveDirectoryW
CloseHandle
FreeLibrary
GetProcAddress
CreateEventW
LoadLibraryW
GetSystemDefaultLangID
GetModuleFileNameW
GetLastError
CreateMutexW
FindResourceW
DeleteFileW
LoadResource
LockResource
SetEvent
SizeofResource
GetFileTime
DestroyMenu
CharUpperW
GetSysColorBrush
LoadCursorW
SetCapture
ReleaseCapture
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassW
RegisterClipboardFormatW
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
SetWindowContextHelpId
MapDialogRect
GetWindowTextW
SetFocus
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuItemCount
GetSubMenu
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuW
GetMenuState
CheckMenuItem
EnumDesktopWindows
GetWindowThreadProcessId
GetWindow
MessageBoxW
GetForegroundWindow
EnableMenuItem
GetSystemMenu
PostThreadMessageW
GetDlgItem
LoadIconW
GetClientRect
GetSystemMetrics
UpdateWindow
IsIconic
GetAsyncKeyState
SetLayeredWindowAttributes
GetWindowRect
SendMessageW
LoadBitmapW
GetParent
KillTimer
SetTimer
IsWindowVisible
EnableWindow
RegisterWindowMessageW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ReleaseDC
GetDC
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetWindowPos
GetMenuItemID
UnregisterClassA
SetMapMode
DeleteObject
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetViewportExtEx
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
OffsetViewportOrgEx
CreateBitmap
GetStockObject
DeleteDC
ExtSelectClipRgn
GetFileTitleW
OpenPrinterW
DocumentPropertiesW
ClosePrinter
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
InitiateSystemShutdownW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW
InitCommonControlsEx
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
OleUIBusyW
CoTaskMemFree
CoCreateGuid
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
VariantInit
SafeArrayCreate
SafeArrayGetElemsize
LoadTypeLi
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
DispCallFunc
VariantCopy
VariantChangeType
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantClear
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ