Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
actual_version_x32-64_pack.exe
Resource
win10v2004-20240426-en
Target
actual_version_x32-64_pack.zip
Size
16.8MB
MD5
07d8d404d42180413c440a510ad6d77a
SHA1
446a4f2ca3238f54ad930c29686c75b87ea6f001
SHA256
bcf65ca00cca3d4ee510f083ea3cf17e1995ee493522a6cc652216f3c5035b2a
SHA512
42ef21d64e74eacda835863b679230160936bf8cad5e350e6f10464415b85f569f1f0c05addabb84ced53109a978be9a3b5bd9180ed99ad506a9f2f6605342a7
SSDEEP
393216:HkFUvuCCA+VZRC0mDNfQCwBUbtG88QuoiWg:HZuCCA+V+0yx7Ltlunr
resource | yara_rule |
---|---|
static1/unpack001/actual_version_x32-64_pack.exe | pyinstaller |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetClientRect
ord380
ExpandEnvironmentStringsW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OpenProcessToken
CreateFontIndirectW
/u��pF�����{��]�����1��pCZ���P�'�v"�v���2[�:Q��ذrDrɘ�L�������QlI��P�I=�����}�8 /���OU�^.W5pe 5�E-|��%�4K���Jq��M# �@�"���̄��1��a%��v��:�,���[� ��]3���z��$W8#,�����q,����`���E����6@1�C�I��"�)r����z���� ���F�Y.���v���6Ӌv+� �W2�O�#ݓG�.EI3;e�c���ʧ~�&~�?�$R��f�+y�. ��vZtf����{�7o����d%J�N��}lʎ�D�(0�('�D�e6����|�b�(�n ����B��������d(�Mf~�V/�&�);/u�Gփ���=������uH�7��|S �(���b�����sZ�ǤL����c�'��M�{�L�Ä���T�DOn��)��o@M�.*+�����<�l�������NoWH�k*�[��G�B��'>���/qM����@����K�1킌-�1�M�l�I l�e�[�P����X�O�y�����M^*B�%VN�Cq����(4ª��2�K�F� �oY]�$$�"E��#�Ī�3��Re5}g�K�uj(>R��]��c�r`�n�+�[�cؕoa��ˢx��uL,���}n5q��������|6��U���osu��*G/U�˅ϊ��y��t�w(�=P�d��^���#��:�J�xK1���(�s5�2M�d���ȡ��-�=[��cc� � ��V�O��`P$�At��P�/�vA�q���֦'����<���������tfa�$/!�� ~��7;tb�B��_W���jDq���Q�lP[|�ք��B�oh�� ��a���H�%)O~�?��2�<��P����,wj�s :���%`z��i?�A�B�]H�g%H�\w�^IWp��z�P�y�Z�h��˽i%\j?���۠�)�ʊ��Sj2��D&wk���?�S�yqn�a0����� �͜'y��5�^},]�(q`�^3�7ƨ��y�k0�z��ی�- �>�S�Ni� ��^WC������6��J�jJ�NXX�$�V�����iA �!��֒�i�vP��X6���l��*<�|H�ܝ|�ۉ�}���mZ�H}���"Z���s昖����r��bۯ� �����}b��,"����f=���N���_șݑ�٘x��<M�'h����/�b�x�Ȱغ�%���yi�BW�����s�s�<ً%�����?� w��Բ��hpq9ɜ ȧJQ�"�L�vз��1��f ��'���u;���j��.QL��(�9��P�bmW��U^�(^C!��O+Ƭ]��>c�8Q ���U`�F��BA\���I[*Q+�L9�����M����cH�3y}���7k���^�g�t��>��MN�����R�WU\�8 b)�G%~K� ��l��R:����·��46Qa��� ��E����c��Y�Y��͐0gn���2����|اl��m��w�3�/���0�`�S*%[�vĂ0*ߣo����Q��Z��*�����c��4��EW��9"�1��#Kx9���A�r���b{ҁ���u�C��\�O��(�7�$ۉ��\SB�ˁ�5���N�� R��1>'�'KBx���C��(������f�f�y��I5Ǫs����g`cU��"�g��9�"Ux�ϩT!������w~�. �'Yě������t�KB�э�a}��*�8�-�RE�I�xDQ K@�'p����J�S`�h�@#ng�����`��j�M��Z�g��ՠ"�����U� �U�`ȋ˵� 3}+ċ�pA���"���K�����B��Q���43U\i-�3����S�( �3��=��ޔ^��3���3Z5�$g\���0��gcԅʯ;��\���W僱�vyq�G�]�SJ�5�j�Ej.��E����8�h�Md^8N��q�IG�GKg�|)~?,<�=��PdY��-��I4W��pݛf��ЀQ��n�l9x:�������n9�m�8���)�M�n�n�j9%�#��_Lg�t|e�tk.dsҘ7�C,�ᾑ���L�����O~��������+7F3��f?���9�%����ގ��`��@?�'_7\S%�cE9� uUab�����"�ɀ##���F��D�:UiCy�/�p�@=H�n��u���s��)H���+���f�$�īr�ܼzZD�S43���]z� �r�cn:�9A�=�k�ކC\&!�QDayF�!V/cO�G�>W�P9����)}�-�� �t?QƔV/�h�1!B{mn��k�\�"�������.�.�������d�l;Z��nr��FE�7�_*��?��ꬌ��M��L����n�YL J�'�=��A��uq.�7��6�p���^��`m�p���S�Oz��>�Ǭ��B��'2�U9�m�`U(��&:�VBִ��X�K�Xݒ��D*�!��{��j}�mWw�f��媨�M�� ��a����?&�߰���.�_�g3�4��/���d��4Ehh����} V �b�,��i?!ͤ�l�ń�� 0lk�Zʼn.�q(�C�9�x��n�s��@��� �A�ݍ���X����.��[1Chw)"�fԹU�Rkߥu�t+�c>n�M���zv,��!k,0#�ۆn��u��[����ճ�M-�9xs�t19J�\XR�tjׇ��N�l���_�����6e��@�CJ�@���d����x_h���Yb2���i�Κf)sS&f�'�C4U�K�H-�n0��ó� \ߞ��ф� ��pJ�\�ɜY�Js;�����P>|�9~�j���t�uc�p���=��L���3MT�����Wчoj^R���y��Y�E��z�����㲟!�lk��+���E��Ϫq���x��y�����Bw�3�� ��X�&nE��)i/53YU%|�LΑ�@v���b4S�]@��k���v��g� �T�u�>��,���D2[��x
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ