Expensive Upgrade.zip
- SHA256 bf1952d0696cc5a413ce81f6683a456a5654c86cf152fed2b80b8c48aa18f77a
Static task
static1
Behavioral task
behavioral1
Sample
Expensive Upgrade.zip
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
Expensive Upgrade.zip
Resource
win11-20240709-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/expensive_upgrade/jemalloc.dll |
| unpack004/natives/OpenAL.dll |
| unpack004/natives/SAPIWrapper_x64.dll |
| unpack004/natives/glfw.dll |
| unpack004/natives/jemalloc.dll |
| unpack004/natives/lwjgl.dll |
| unpack004/natives/lwjgl_opengl.dll |
| unpack004/natives/lwjgl_stb.dll |
| unpack004/natives/lwjgl_tinyfd.dll |
Unsigned PE
Checks for missing Authenticode signature.
Mar 15, 2024
CN=IP Kayukin Gleb Anatolievich,O=IP Kayukin Gleb Anatolievich,L=Izhevsk,ST=Udmurt Republic,C=RU
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=IP Kayukin Gleb Anatolievich,O=IP Kayukin Gleb Anatolievich,L=Izhevsk,ST=Udmurt Republic,C=RU
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Unsigned PE
Checks for missing Authenticode signature.
count=41, id=260, version=23917,
count=26, id=259, version=23917,
count=153, id=261, version=23917,
count=1, id=199, version=41118,
count=29, id=261, version=26706,
count=14, id=260, version=26706,
count=12, id=259, version=26706,
count=11, id=257, version=23917,
count=149, id=1, productName=Unmarked objects,
count=57, id=260, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=241, version=40116,
count=116, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=208, version=65501,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=16, id=260, version=24123,
count=5, id=203, version=65501,
count=88, id=1, productName=Unmarked objects,
count=3, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
count=17, id=260, version=23917,
count=9, id=259, version=23917,
count=127, id=261, version=23917,
count=29, id=261, version=26706,
count=15, id=260, version=26706,
count=8, id=259, version=26706,
count=9, id=257, version=23917,
count=196, id=1, productName=Unmarked objects,
count=15, id=260, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=260, version=26213,
count=6, id=259, version=26213,
count=140, id=261, version=26213,
count=3, id=257, version=26213,
count=95, id=1, productName=Unmarked objects,
count=5, id=199, version=41118,
count=31, id=261, version=26706,
count=14, id=260, version=26706,
count=8, id=259, version=26706,
count=32, id=264, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=260, version=26213,
count=5, id=259, version=26213,
count=147, id=261, version=26213,
count=3, id=257, version=26213,
count=91, id=1, productName=Unmarked objects,
count=30, id=261, version=26706,
count=14, id=260, version=26706,
count=8, id=259, version=26706,
count=2, id=259, productName=VS2017 v15.9.11 build 27030, version=27030,
count=11, id=260, productName=VS2017 v15.9.11 build 27030, version=27030,
count=19, id=264, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=260, version=26213,
count=5, id=259, version=26213,
count=133, id=261, version=26213,
count=3, id=257, version=26213,
count=84, id=1, productName=Unmarked objects,
count=30, id=261, version=26706,
count=14, id=260, version=26706,
count=8, id=259, version=26706,
count=176, id=264, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=260, version=26213,
count=19, id=259, version=26213,
count=152, id=261, version=26213,
count=3, id=257, version=26213,
count=85, id=1, productName=Unmarked objects,
count=30, id=261, version=26706,
count=14, id=260, version=26706,
count=10, id=259, version=26706,
count=11, id=264, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=260, version=26213,
count=8, id=259, version=26213,
count=178, id=261, version=26213,
count=30, id=261, version=26706,
count=16, id=260, version=26706,
count=8, id=259, version=26706,
count=11, id=257, version=26213,
count=128, id=1, productName=Unmarked objects,
count=2, id=264, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
May 12, 2024
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=241, version=40116,
count=130, id=243, version=40116,
count=13, id=242, version=40116,
count=2, id=253, version=31616,
count=18, id=260, version=31616,
count=10, id=259, version=31616,
count=1, id=135, version=30729,
count=54, id=261, version=31616,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=178, id=1, productName=Unmarked objects,
count=53, id=261, version=31630,
count=1, id=255, version=31630,
count=1, id=258, version=31630,