Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
7Static
static
7GR2Analyst...R].zip
windows7-x64
1GR2Analyst...R].zip
windows10-2004-x64
1GR2Analyst...en.exe
windows7-x64
7GR2Analyst...en.exe
windows10-2004-x64
7GR2Analyst...ch.exe
windows7-x64
7GR2Analyst...ch.exe
windows10-2004-x64
7GR2Analyst...xe.png
windows7-x64
1GR2Analyst...xe.png
windows10-2004-x64
3GR2Analyst...up.exe
windows7-x64
4GR2Analyst...up.exe
windows10-2004-x64
4GR2Analyst...te.exe
windows7-x64
4GR2Analyst...te.exe
windows10-2004-x64
4Behavioral task
behavioral1
Sample
GR2Analyst 3.2.1.1 [FileCR].zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GR2Analyst 3.2.1.1 [FileCR].zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
GR2Analyst 3.2.1.1/RLTS/Keygen.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
GR2Analyst 3.2.1.1/RLTS/Keygen.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
GR2Analyst 3.2.1.1/RLTS/Patch.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
GR2Analyst 3.2.1.1/RLTS/Patch.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
GR2Analyst 3.2.1.1/RLTS/RLTS_deluxe.png
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
GR2Analyst 3.2.1.1/RLTS/RLTS_deluxe.png
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
GR2Analyst 3.2.1.1/gr2analyst_3_setup.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
GR2Analyst 3.2.1.1/gr2analyst_3_setup.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
GR2Analyst 3.2.1.1/gr2analyst_3_update.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
GR2Analyst 3.2.1.1/gr2analyst_3_update.exe
Resource
win10v2004-20240221-en
Target
GR2Analyst 3.2.1.1 [FileCR].zip
Size
32.8MB
MD5
e85c210b6ba53c00ac0c1e91e19a878d
SHA1
77a905c77f5e26593b454120613914cd431bba97
SHA256
b6656f7cb6e2756358ce22cc86faad3971a1db1ee5008c7fa3df45cd25aae8c9
SHA512
b32962f290119711cf6478a87b6a46ce2e960d40571a1c61c8ed428c4f8876b0b1d68ab85f9b9715954f5b69c92d520b9194c9e2496cee63dc671e12deb9f9d2
SSDEEP
786432:2DVnwXiaVBMgiHut5Ji8OwmlJhZFcWB3mpHxaHVc9/rg5iCL:IVnwTiOtK8fml1FhBK4HWZI
resource | yara_rule |
---|---|
static1/unpack001/GR2Analyst 3.2.1.1/RLTS/Keygen.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/GR2Analyst 3.2.1.1/RLTS/Keygen.exe |
unpack002/out.upx |
unpack001/GR2Analyst 3.2.1.1/RLTS/Patch.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ