Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
3Static
static
1Nursultan ...hk.zip
windows7-x64
1Nursultan ...hk.zip
windows10-2004-x64
1??????????.txt
windows7-x64
1??????????.txt
windows10-2004-x64
1Nursultan ...AR.exe
windows7-x64
3Nursultan ...AR.exe
windows10-2004-x64
3Nursultan ...ig.yml
windows7-x64
3Nursultan ...ig.yml
windows10-2004-x64
3Nursultan ...ic.yml
windows7-x64
3Nursultan ...ic.yml
windows10-2004-x64
3Nursultan ...on.yml
windows7-x64
3Nursultan ...on.yml
windows10-2004-x64
3Nursultan ...6.json
windows7-x64
3Nursultan ...6.json
windows10-2004-x64
3Nursultan ....7.xml
windows7-x64
1Nursultan ....7.xml
windows10-2004-x64
1Nursultan ...0aca2f
windows7-x64
1Nursultan ...0aca2f
windows10-2004-x64
1Nursultan ...c8c88b
windows7-x64
1Nursultan ...c8c88b
windows10-2004-x64
1Nursultan ...9382ea
windows7-x64
1Nursultan ...9382ea
windows10-2004-x64
1Nursultan ...2279f4
windows7-x64
1Nursultan ...2279f4
windows10-2004-x64
1Nursultan ...ff636c
windows7-x64
1Nursultan ...ff636c
windows10-2004-x64
1Nursultan ...aafedd
windows7-x64
1Nursultan ...aafedd
windows10-2004-x64
1Nursultan ...b12b7a
windows7-x64
1Nursultan ...b12b7a
windows10-2004-x64
1Nursultan ...e3d03e
windows7-x64
1Nursultan ...e3d03e
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Nursultan Alpha By Fleshk.zip
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Nursultan Alpha By Fleshk.zip
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
??????????.txt
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
??????????.txt
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
Nursultan Alpha/assets/UnRAR.exe
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
Nursultan Alpha/assets/UnRAR.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
Nursultan Alpha/client_1_16_5/ViaFabric/ViaBackwards/config.yml
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Nursultan Alpha/client_1_16_5/ViaFabric/ViaBackwards/config.yml
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Nursultan Alpha/client_1_16_5/ViaFabric/viafabric.yml
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
Nursultan Alpha/client_1_16_5/ViaFabric/viafabric.yml
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Nursultan Alpha/client_1_16_5/ViaFabric/viaversion.yml
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
Nursultan Alpha/client_1_16_5/ViaFabric/viaversion.yml
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Nursultan Alpha/java/indexes/1.16.json
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
Nursultan Alpha/java/indexes/1.16.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Nursultan Alpha/java/log_configs/patched-variant-2.7.xml
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
Nursultan Alpha/java/log_configs/patched-variant-2.7.xml
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
Nursultan Alpha/java/objects/00/000c82756fd54e40cb236199f2b479629d0aca2f
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
Nursultan Alpha/java/objects/00/000c82756fd54e40cb236199f2b479629d0aca2f
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Nursultan Alpha/java/objects/00/003409183ca2b8a8a140bfeb6390d1a9edc8c88b
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
Nursultan Alpha/java/objects/00/003409183ca2b8a8a140bfeb6390d1a9edc8c88b
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Nursultan Alpha/java/objects/00/0076a7bdf840e166559cd82e8f58e633c59382ea
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
Nursultan Alpha/java/objects/00/0076a7bdf840e166559cd82e8f58e633c59382ea
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
Nursultan Alpha/java/objects/00/007a96cf5c6585babb020381a1075912df2279f4
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
Nursultan Alpha/java/objects/00/007a96cf5c6585babb020381a1075912df2279f4
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
Nursultan Alpha/java/objects/00/007f04ca456cfc7c0e877352f01a7aa77dff636c
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Nursultan Alpha/java/objects/00/007f04ca456cfc7c0e877352f01a7aa77dff636c
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
Nursultan Alpha/java/objects/00/0087759fe01bdfad15071766d42a264aa0aafedd
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
Nursultan Alpha/java/objects/00/0087759fe01bdfad15071766d42a264aa0aafedd
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
Nursultan Alpha/java/objects/00/00b38fae5d28d99514a3e73a913af16359b12b7a
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
Nursultan Alpha/java/objects/00/00b38fae5d28d99514a3e73a913af16359b12b7a
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
Nursultan Alpha/java/objects/00/00bed9da53f433efedf9fd33a7f37713a6e3d03e
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
Nursultan Alpha/java/objects/00/00bed9da53f433efedf9fd33a7f37713a6e3d03e
Resource
win10v2004-20240611-en
Target
Nursultan Alpha By Fleshk.zip
Size
97.8MB
MD5
01cd8c8066014ca22656001bda5e1cad
SHA1
e6184a3542886ea5048c1605ff31704721b95b7b
SHA256
80b5ec95630e41ab434aa5173bf0e01d649c988c8a808f5c6dc9f5429ec6dea9
SHA512
31deb0eb99745619cb83f8e0ca5c867269c51dba6c36a3260b11d62de425e6cb5708f8ced11091a5ce36dab0a1ef87cddc0e6ced67c44f29d7fb10a7cb74c7b7
SSDEEP
3145728:uXkNG9af8Jo2yViibaJM5qI/qn3C58scDiAQ8j8DwP:uUssR2yUwaisWqn3s8RvQ8j8DwP
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\Projects\WinRAR\rar\build\unrar64\Release\UnRAR.pdb
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetCurrentProcessId
GetDriveTypeW
GetDiskFreeSpaceExW
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
GetVolumeInformationW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetModuleFileNameW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
SetErrorMode
GetModuleHandleW
FreeLibrary
LoadLibraryExW
GetProcAddress
ExpandEnvironmentStringsW
SetConsoleCtrlHandler
SetThreadPriority
SetThreadExecutionState
CreateEventW
LoadLibraryW
GetSystemDirectoryW
SetPriorityClass
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
HeapSize
SetFilePointerEx
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
FormatMessageW
Sleep
SetLastError
GetLastError
LocalFree
WriteConsoleW
ReadConsoleW
SetConsoleMode
GetConsoleMode
WriteFile
GetStdHandle
GetFileType
GetCurrentThread
GetCommandLineW
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
SetStdHandle
GetConsoleCP
HeapAlloc
HeapFree
LCMapStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetModuleFileNameA
GetCommandLineA
GetACP
GetStringTypeW
LoadStringW
CharLowerW
CharToOemA
OemToCharBuffA
OemToCharA
ExitWindowsEx
MessageBeep
CharToOemBuffW
CharUpperW
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueW
SetFileSecurityW
AdjustTokenPrivileges
OpenProcessToken
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
CoCreateInstance
CoSetProxyBlanket
VariantClear
SysFreeString
SysAllocString
SetSuspendState
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ