Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
7Static
static
3Unbanned.GG.rar
windows7-x64
7Unbanned.GG.rar
windows10-2004-x64
3NvGpuUtilization.exe
windows7-x64
1NvGpuUtilization.exe
windows10-2004-x64
1Unbanned.g...le.sys
windows10-2004-x64
1Unbanned.g...ln.sys
windows10-2004-x64
1Unbanned.g...o2.sys
windows10-2004-x64
1Unbanned.g...me.exe
windows7-x64
1Unbanned.g...me.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Unbanned.GG.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Unbanned.GG.rar
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
NvGpuUtilization.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
NvGpuUtilization.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Unbanned.gg/Temp/simple.sys
Resource
win10v2004-20240419-en
Behavioral task
behavioral6
Sample
Unbanned.gg/UEFI/MainVln.sys
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Unbanned.gg/UEFI/bio2.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral8
Sample
Unbanned.gg/UEFI/name.exe
Resource
win7-20240221-en
Behavioral task
behavioral9
Sample
Unbanned.gg/UEFI/name.exe
Resource
win10v2004-20240226-en
Target
Unbanned.GG.rar
Size
10.4MB
MD5
36c896908e249fa84df008e49acea643
SHA1
b865dbb74afdef007c4427c1301c58a453b571f1
SHA256
2d443d164c19087e3223b2ace06ea5c4f1a2da3cf313f6511f1c02a2a698a6f5
SHA512
c1920413de0bac9003cf7cdf24ac8fe22fc582e45617f8d059cd334daf934e6cd4f90084d6cc948baf0500b5306d11d36647180fc3163a30dc17f8fef60acd30
SSDEEP
196608:WSaL+BEnNdzQtj56hXWrBYHmTsctmDbXhytInXpZKVcx/tjSOTkmaOpKZSjEBGR/:WSaCBENdMtj56dkNUbUQXHttjVImpKSx
Checks for missing Authenticode signature.
resource |
---|
unpack001/Unbanned.gg/Bootmov/amideefix64.efi |
unpack001/Unbanned.gg/Bootmov/efi/boot/BOOTX64.efi |
unpack001/Unbanned.gg/UEFI/name.exe |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
HeapAlloc
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
UnregisterClassW
CharUpperBuffW
RegSetKeyValueW
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
NtQuerySystemInformation
__std_type_info_destroy_list
__CxxFrameHandler4
__setusermatherr
����p��=͋��X�љ�g�m?���ܭ�b�#(�7�NM��*s��M�'|���/�}���g��7�Fmg?���;tI��Qʆ���R�&�+�����[u�`F6����J��&�!OԬV:_���u3�[��y�'��:��zU�� K����y�t��e��;�=���T��#�̱����e5Y��v ;v{u'T�)D�ԋ�J>�-�h���è��%*�'X5�X�F&�stC��X1��� �OT�˽�N���O���;�����C����ՠ2O��_uX�S��%�4q�"bǏD�ϧ�� �9��]�:߈����W����ft_��M���h"� �dǷ�ׇ��}Z�ؚ�h`�7�M���ר�T�L��� E�:����{�B:�h{�^����d0G���f������$�ԹP%��C���m�G�f��piL��k�Z���"���<j*lI�� ��p���l���1����x�pY}�"3qK->�S@�L�^�(2��2�Y�|=�ȸ�#�8Ό�z��mE$:k�x���>e��n�lԥ��������(���D@��{{��-�s����?Q�-]��f��(&rk �4Ev�ĢFP����6�\a��-�����/}J.�H�0K�Z,l>)J$�I����k�A�0A�ըK\8a[V�ی�(b#co+�)�R�^hK�]�(�F��������HB�z�F��FvD�Ԟ��W�b��x�U�ݭCf�7���R���'j����*`K���7nQ"�m+�A�����\dHT�UnKB�f����� ��=�z�xy ����e�㹏 ���<4��n�s��H0�Z���al��.���c��#m���o}0�S�(����O�@F�<a��8�����9X}?w�K��~\`���[��+��{���7��C�6��f��n�e%d~N���4�A��B?�����"f�)�w�b���?|G� hA�n:%��n��u]��;�&c,�����B ����}hZ '���$QkXC� I��S� �qZnRZ�����9ֺ��FI��-�5�'�v9K���R��l�-GV��x�!c�GvM���(��Hٹ����U@f��|(��=p�����4�����gd̎\�X��#����|�r��g��� �M��r�_��O�..�� �Þ���`υN���~��^� �BP-� Qg����K�lX��M�%O��/��[VWf�-������-QY���h��҉7Q���&ax����|dqPc�O��=ʘ� ��=��)���w��%��W���u�dp�2��khM{N�[�,2�x�L?�C:T���DC�|yEɾ�bj%��j(;�(i2���(}�D�yy� ]�%����n9~ە$n~�JO�K?ʵ���/r��y#���.r�V�K��`�����oY�� �Sf�@�O�����wG��}0��O�!�.����Wݓ�6)1Bq�6\���4���G\i�����k'�֙cj��,ذ�OϜ�:����Z[�q���p�z=�b\��`9�.��s;eLJ;�Ik�j-�`�z���O���Qc�"��&�6��Pq+�m�CS|��>#�V_�2fVQ�X�_��0����j�Mf�b�'�|���<������e�Hqϥ}���Ҏ ��k�����TŇq���e�<���3^������ LޅŲ�5��Rw�B���/�:��k-C���}���nB�i����!�M�?�R��x��=�С�z�c��:��̆��W4��2��KI�K"HoRɿ�-G�_�q)��_h|����R?&�+z�?G��=���y�?��� ��{ؔ��{(�ؗ~D�ɫ2���a"B�mP�T~ݹCx$8��ӫ�:�x?�OŤ�Im��]Vٱ3�蒬�KWq�X���Dr.r�K�����X�| �wd-�Q��!>�t�વ�8��Q�N0���P������$���T#)�,>���0��AH8;[�;Hg������*A9�?�8��\��> ��e���4��e��a\(f@n?쁌z��tl�������51�YP.}��#����f��ss���%g���Q��pԂ��H���3�Ǟ$*�q1��[B�C��N�)�]y��fS�h�Ry��o���[���P;����ST^j(t:3m��JBQ�Ǖ����E���V���ݪ&+,�9�`�_�ϒ�T\i<m��Ղj��#UEP�&1��U]�rb����A��[�sTsfv%m���cS��ݼG)g{�S!g֞�X".1�QmY�VT�Q �V���%� @@���+�fd��Scd�LcQ�}B݄N�B\i �ӆ�-�)�riB�#,l!���&���� ��f���di/UM������`�m_�T��� s�'���*�L)���;^\���h��X��Jŷ�Z�ݫY56��?��,#���'F��p�e��D=T�ţ��4�%_���J��ēr���i�vGV�c�ۨ���n,w?��h�A<�������MϪ,��91�@ؚk�B/{��X�����,3�#t������X����&�6���-�>4�Mv�#���,Ʉ) K_ް��,�H��}��u��s:�I:�C'yA�9A�`��l�� �dE��4�����HK��_�� "�P�3�`{�p�3�@}�\���}v��x\���I���A�6!?��ˢ�j�v:XM�P�7��J�!a�j&ڊ4�#�:x�?~=�Q�Ƅ��+X���|<m?0-��P��^%� �R/^�A~��ֱ�l����m1|������S�� �"���\���(�V����#*=��s���A)�u�~_@e��Z��k���7�R���J�U��_ K�`��������`�i C*��S�<�I��C�S'7�>2�?3��ק���f�e�"�7(�Kc�ڜFjݼ�&TLJ3�~���*��l�<r�lA2?0d�F���O��^#ׅ�A,�y�;K ���Ba��/�gaWtn��ZR�ģ�k�0����I>?����I�]RUfeG'�<����3E ��L�h�Y*w�a�7* :R�� �CV�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IoGetDeviceObjectPointer
ObfDereferenceObject
RtlRandomEx
IoEnumerateDeviceObjectList
ObReferenceObjectByName
_vsnwprintf
IoDriverObjectType
KeDelayExecutionThread
ExAllocatePoolWithTag
ExFreePoolWithTag
RtlInitUnicodeString
ZwClose
ZwOpenKey
ZwQueryValueKey
ZwSetValueKey
ZwQuerySystemInformation
ZwDeleteKey
ZwDeleteValueKey
ZwEnumerateKey
MmMapLockedPages
MmCopyMemory
swprintf
strstr
MmMapIoSpace
MmUnmapIoSpace
KeQueryTimeIncrement
KeQueryPerformanceCounter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\AMIBIOS\Utility\AmiFlashDriver\AmiFlashDriverSrc\sys\x64\Release\amigendrv64.pdb
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmAllocateContiguousMemory
MmFreeContiguousMemory
IoAllocateMdl
IoFreeMdl
MmGetPhysicalAddress
ZwUnmapViewOfSection
RtlInitUnicodeString
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
RtlCompareMemory
KfRaiseIrql
MmMapIoSpace
MmUnmapIoSpace
ObReferenceObjectByHandle
ZwClose
ZwOpenSection
ZwMapViewOfSection
ExFreePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
KeLowerIrql
RtlGetVersion
HalTranslateBusAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IoGetDeviceObjectPointer
ObfDereferenceObject
RtlRandomEx
IoEnumerateDeviceObjectList
ObReferenceObjectByName
_vsnwprintf
IoDriverObjectType
DbgPrintEx
KeDelayExecutionThread
ExAllocatePoolWithTag
ExFreePoolWithTag
RtlInitUnicodeString
ZwClose
ZwOpenKey
ZwQueryValueKey
ZwSetValueKey
ExAllocatePool
ZwQuerySystemInformation
ZwDeleteKey
ZwDeleteValueKey
ZwEnumerateKey
MmMapLockedPages
MmCopyMemory
swprintf
strstr
MmMapIoSpace
MmUnmapIoSpace
KeQueryTimeIncrement
KeQueryPerformanceCounter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetFileType
GetStartupInfoW
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsSetValue
FlsGetValue
GetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
SetConsoleCtrlHandler
FreeLibrary
SetHandleCount
LoadLibraryExW
HeapFree
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
GetProcAddress
SetUnhandledExceptionFilter
GetVersionExW
InitializeCriticalSectionAndSpinCount
GetCommandLineA
SetEndOfFile
SetStdHandle
GetSystemFirmwareTable
GetVersionExA
SetThreadExecutionState
CreateMutexA
SetProcessAffinityMask
GetCurrentDirectoryA
GetModuleHandleA
DeleteFileA
GetWindowsDirectoryA
LoadLibraryA
GetSystemDirectoryA
CloseHandle
GetFullPathNameA
CreateNamedPipeA
CreateFileA
ReadFile
CreateThread
LocalFree
DeviceIoControl
LocalSize
LocalAlloc
lstrlenA
FormatMessageA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
HeapSize
GetConsoleCP
FlushFileBuffers
CreateFileW
WriteConsoleW
SetFilePointer
GetProcessHeap
StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatusEx
ControlService
DeleteService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
CreateServiceA
ShellExecuteA
ExitWindowsEx
RegisterClassExA
DefWindowProcA
DispatchMessageA
BlockInput
GetMessageA
MessageBoxA
CreateWindowExA
SystemParametersInfoA
TranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ