Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
3Static
static
3BIOS_eMach...OS.bat
windows7-x64
BIOS_eMach...OS.bat
windows10-2004-x64
BIOS_eMach...DC.exe
windows7-x64
BIOS_eMach...DC.exe
windows10-2004-x64
BIOS_eMach...OT.exe
windows7-x64
BIOS_eMach...OT.exe
windows10-2004-x64
BIOS_eMach...16.exe
windows7-x64
BIOS_eMach...16.exe
windows10-2004-x64
BIOS_eMach...11.exe
windows7-x64
BIOS_eMach...11.exe
windows10-2004-x64
BIOS_eMach...sh.sys
windows7-x64
1BIOS_eMach...sh.sys
windows10-2004-x64
1BIOS_eMach...11.exe
windows7-x64
BIOS_eMach...11.exe
windows10-2004-x64
BIOS_eMach...64.sys
windows7-x64
1BIOS_eMach...64.sys
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
BIOS_eMachines_1.11_Windows/BIOS.bat
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
BIOS_eMachines_1.11_Windows/BIOS.bat
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
BIOS_eMachines_1.11_Windows/DOS/ACERACDC.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
BIOS_eMachines_1.11_Windows/DOS/ACERACDC.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
BIOS_eMachines_1.11_Windows/DOS/EC_CBOOT.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
BIOS_eMachines_1.11_Windows/DOS/EC_CBOOT.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
BIOS_eMachines_1.11_Windows/DOS/phlash16.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
BIOS_eMachines_1.11_Windows/DOS/phlash16.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
BIOS_eMachines_1.11_Windows/Winflash32/JE70D111.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
BIOS_eMachines_1.11_Windows/Winflash32/JE70D111.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
BIOS_eMachines_1.11_Windows/Winflash32/flash.sys
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
BIOS_eMachines_1.11_Windows/Winflash32/flash.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
BIOS_eMachines_1.11_Windows/Winflash64/JE70D111.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
BIOS_eMachines_1.11_Windows/Winflash64/JE70D111.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
BIOS_eMachines_1.11_Windows/Winflash64/flash64.sys
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
BIOS_eMachines_1.11_Windows/Winflash64/flash64.sys
Resource
win10v2004-20231215-en
Target
14192e9958dca255aa7b6e00f28d5384
Size
4.1MB
MD5
14192e9958dca255aa7b6e00f28d5384
SHA1
ae24aef77073331f3d301d69cecd0a2799d7f729
SHA256
48264d449382258f88390455be042e121c60203b137045d5f75eecc70e60db07
SHA512
7230dd9afc00f2ac13e4e60b0efba959d07fd590282b437b1a65a02138a535a516fe8adf75e625ff601b39b9a6559a2a2fc509b4813ed9bc3dbed212cc9ebe48
SSDEEP
98304:Um/M8qjm/M8qQmoBFsAMzIM7dZiJ0H7tf4JdcL:kTDBgJKjL
Checks for missing Authenticode signature.
resource |
---|
unpack001/BIOS_eMachines_1.11_Windows/Winflash32/JE70D111.exe |
unpack001/BIOS_eMachines_1.11_Windows/Winflash32/flash.sys |
unpack001/BIOS_eMachines_1.11_Windows/Winflash64/JE70D111.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
FormatMessageA
DeleteFileA
MulDiv
IsDBCSLeadByte
GetExitCodeProcess
CreateProcessA
GetTempFileNameA
GetSystemDefaultLCID
WaitForSingleObject
CompareStringA
Sleep
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
FreeLibrary
RemoveDirectoryA
FindNextFileA
WritePrivateProfileSectionA
GetStartupInfoA
WriteFile
ReadFile
SetFileAttributesA
LocalFree
LocalAlloc
LockResource
LoadResource
FindResourceA
SizeofResource
GetModuleHandleA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
lstrcmpiA
GetDiskFreeSpaceA
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameA
ExitProcess
CreateFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
lstrcpynA
SetFilePointer
GetFileSize
FindFirstFileA
CreateDirectoryA
GetLastError
GetPrivateProfileStringA
FindClose
GetFileAttributesA
lstrcatA
lstrlenA
GetWindowsDirectoryA
lstrcpyA
GetSystemDirectoryA
GetTempPathA
GetPrivateProfileSectionA
LoadLibraryA
MoveFileExA
WritePrivateProfileStringA
GetShortPathNameA
FlushFileBuffers
CloseHandle
IsBadCodePtr
IsBadReadPtr
SetStdHandle
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
TerminateProcess
GetStringTypeW
GetCurrentProcess
GetOEMCP
GetACP
GetStringTypeA
IsBadWritePtr
HeapReAlloc
GetCPInfo
VirtualFree
HeapCreate
VirtualAlloc
GetVersion
GetCommandLineA
HeapDestroy
RtlUnwind
GetParent
GetDlgItem
SetFocus
SendDlgItemMessageA
EnableWindow
CheckRadioButton
GetWindowLongA
LoadStringA
LoadImageA
MessageBoxA
CharNextA
IsDlgButtonChecked
GetDlgItemTextA
CheckDlgButton
SetDlgItemTextA
ReleaseDC
GetDC
GetWindow
PostMessageA
SetWindowTextA
wsprintfA
GetDesktopWindow
GetWindowTextA
DestroyWindow
CreateDialogParamA
FillRect
GetSysColor
GetSysColorBrush
EndPaint
BeginPaint
DrawTextA
MoveWindow
GetClientRect
ScreenToClient
GetNextDlgTabItem
SetParent
MapDialogRect
IsWindow
GetWindowRect
CreateDialogIndirectParamA
ShowWindow
InvalidateRect
IsWindowEnabled
SetWindowPos
UpdateWindow
IsDialogMessageA
SetWindowLongA
GetActiveWindow
SetActiveWindow
LoadIconA
PeekMessageA
SendMessageA
DispatchMessageA
TranslateMessage
CreateFontIndirectA
RealizePalette
SelectPalette
CreatePalette
GetObjectA
GetStockObject
CreateDIBitmap
GetTextExtentPointA
SelectObject
EnumFontFamiliesExA
DeleteDC
BitBlt
TextOutA
SetBkMode
SetBkColor
CreateCompatibleDC
CreateSolidBrush
SetTextColor
DeleteObject
GetDeviceCaps
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
LZOpenFileA
LZCopy
LZClose
ord17
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IoDeleteSymbolicLink
RtlInitUnicodeString
IoDeleteDevice
IofCompleteRequest
MmMapIoSpace
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
FormatMessageA
DeleteFileA
MulDiv
IsDBCSLeadByte
GetExitCodeProcess
CreateProcessA
GetTempFileNameA
GetSystemDefaultLCID
WaitForSingleObject
CompareStringA
Sleep
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
FreeLibrary
RemoveDirectoryA
FindNextFileA
WritePrivateProfileSectionA
GetStartupInfoA
WriteFile
ReadFile
SetFileAttributesA
LocalFree
LocalAlloc
LockResource
LoadResource
FindResourceA
SizeofResource
GetModuleHandleA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
lstrcmpiA
GetDiskFreeSpaceA
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameA
ExitProcess
CreateFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
lstrcpynA
SetFilePointer
GetFileSize
FindFirstFileA
CreateDirectoryA
GetLastError
GetPrivateProfileStringA
FindClose
GetFileAttributesA
lstrcatA
lstrlenA
GetWindowsDirectoryA
lstrcpyA
GetSystemDirectoryA
GetTempPathA
GetPrivateProfileSectionA
LoadLibraryA
MoveFileExA
WritePrivateProfileStringA
GetShortPathNameA
FlushFileBuffers
CloseHandle
IsBadCodePtr
IsBadReadPtr
SetStdHandle
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
TerminateProcess
GetStringTypeW
GetCurrentProcess
GetOEMCP
GetACP
GetStringTypeA
IsBadWritePtr
HeapReAlloc
GetCPInfo
VirtualFree
HeapCreate
VirtualAlloc
GetVersion
GetCommandLineA
HeapDestroy
RtlUnwind
GetParent
GetDlgItem
SetFocus
SendDlgItemMessageA
EnableWindow
CheckRadioButton
GetWindowLongA
LoadStringA
LoadImageA
MessageBoxA
CharNextA
IsDlgButtonChecked
GetDlgItemTextA
CheckDlgButton
SetDlgItemTextA
ReleaseDC
GetDC
GetWindow
PostMessageA
SetWindowTextA
wsprintfA
GetDesktopWindow
GetWindowTextA
DestroyWindow
CreateDialogParamA
FillRect
GetSysColor
GetSysColorBrush
EndPaint
BeginPaint
DrawTextA
MoveWindow
GetClientRect
ScreenToClient
GetNextDlgTabItem
SetParent
MapDialogRect
IsWindow
GetWindowRect
CreateDialogIndirectParamA
ShowWindow
InvalidateRect
IsWindowEnabled
SetWindowPos
UpdateWindow
IsDialogMessageA
SetWindowLongA
GetActiveWindow
SetActiveWindow
LoadIconA
PeekMessageA
SendMessageA
DispatchMessageA
TranslateMessage
CreateFontIndirectA
RealizePalette
SelectPalette
CreatePalette
GetObjectA
GetStockObject
CreateDIBitmap
GetTextExtentPointA
SelectObject
EnumFontFamiliesExA
DeleteDC
BitBlt
TextOutA
SetBkMode
SetBkColor
CreateCompatibleDC
CreateSolidBrush
SetTextColor
DeleteObject
GetDeviceCaps
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
LZOpenFileA
LZCopy
LZClose
ord17
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IoDeleteDevice
IoIs32bitProcess
MmUnmapIoSpace
MmMapIoSpace
RtlInitUnicodeString
IoCreateSymbolicLink
IoCreateDevice
DbgPrint
KeBugCheckEx
IofCompleteRequest
IoDeleteSymbolicLink
KeStallExecutionProcessor
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE