Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Overview
overview
10Static
static
10Autorisoft.zip
windows7-x64
1Autorisoft.zip
windows10-2004-x64
1Start.exe
windows7-x64
10Start.exe
windows10-2004-x64
10gui.lua
windows7-x64
3gui.lua
windows10-2004-x64
3internal/e...ck.lua
windows7-x64
3internal/e...ck.lua
windows10-2004-x64
3internal/e...eg.lua
windows7-x64
3internal/e...eg.lua
windows10-2004-x64
3internal/e...ad.lua
windows7-x64
3internal/e...ad.lua
windows10-2004-x64
3internal/e...rs.lua
windows7-x64
3internal/e...rs.lua
windows10-2004-x64
3internal/e...rs.lua
windows7-x64
3internal/e...rs.lua
windows10-2004-x64
3internal/e...or.lua
windows7-x64
3internal/e...or.lua
windows10-2004-x64
3internal/e...es.lua
windows7-x64
3internal/e...es.lua
windows10-2004-x64
3internal/e...es.lua
windows7-x64
3internal/e...es.lua
windows10-2004-x64
3internal/game/AI.lua
windows7-x64
3internal/game/AI.lua
windows10-2004-x64
3internal/g...ip.lua
windows7-x64
3internal/g...ip.lua
windows10-2004-x64
3internal/g...ity.js
windows7-x64
3internal/g...ity.js
windows10-2004-x64
3internal/g...ct.lua
windows7-x64
3internal/g...ct.lua
windows10-2004-x64
3internal/game/Ped.lua
windows7-x64
3internal/game/Ped.lua
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Autorisoft.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Autorisoft.zip
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Start.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Start.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
gui.lua
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
gui.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
internal/extensions/CMemoryBlock.lua
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
internal/extensions/CMemoryBlock.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
internal/extensions/CNativeReg.lua
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
internal/extensions/CNativeReg.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
internal/extensions/CScriptThread.lua
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
internal/extensions/CScriptThread.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
internal/extensions/CScriptThread_EventHandlers.lua
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
internal/extensions/CScriptThread_EventHandlers.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
internal/extensions/CScriptThread_Timers.lua
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
internal/extensions/CScriptThread_Timers.lua
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
internal/extensions/Vector.lua
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
internal/extensions/Vector.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
internal/extensions/keycodes.lua
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
internal/extensions/keycodes.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
internal/extensions/vehicles.lua
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
internal/extensions/vehicles.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
internal/game/AI.lua
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
internal/game/AI.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
internal/game/Blip.lua
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
internal/game/Blip.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
internal/game/Entity.js
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
internal/game/Entity.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
internal/game/Object.lua
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
internal/game/Object.lua
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
internal/game/Ped.lua
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
internal/game/Ped.lua
Resource
win10v2004-20240709-en
Target
Autorisoft.zip
Size
17.9MB
MD5
5b879f39e57139ab17300879afa61554
SHA1
a18eab8e257c611f72ea92833584fff0ffaea1f2
SHA256
645e274fec3723d065308f9b16b33392ed7f51fbd5ffc3c00806c2efafb08b65
SHA512
54814430828c204a8b606c000e2efc1fb2586f41c322ebae44d9eba4d297db473d37b520fac02c1bf88407a8a9138a3e7de502e27e32745cd4c96d54c9994ac0
SSDEEP
393216:ZE8wps0kxrkXICtuuL8qgk/H0uxE14p4RToEXkk6hFFh:m2BxoXI6gk/H0u/p4nXkke5
Checks for missing Authenticode signature.
resource |
---|
unpack001/internal/main.dll |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SwitchToThread
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
ShellExecuteA
CoCreateInstance
SHDeleteKeyW
wsprintfW
CharUpperBuffW
RegCreateKeyW
??0Assembler@asmjit@@QAE@PAURuntime@1@@Z
??0CodeGen@asmjit@@QAE@PAURuntime@1@@Z
??0HostRuntime@asmjit@@QAE@XZ
??0JitRuntime@asmjit@@QAE@XZ
??0Runtime@asmjit@@QAE@XZ
??0StaticRuntime@asmjit@@QAE@PAXI@Z
??0VMemMgr@asmjit@@QAE@PAX@Z
??0X86Assembler@asmjit@@QAE@PAURuntime@1@I@Z
??0Zone@asmjit@@QAE@I@Z
??1Assembler@asmjit@@UAE@XZ
??1CodeGen@asmjit@@UAE@XZ
??1HostRuntime@asmjit@@UAE@XZ
??1JitRuntime@asmjit@@UAE@XZ
??1Runtime@asmjit@@UAE@XZ
??1StaticRuntime@asmjit@@UAE@XZ
??1VMemMgr@asmjit@@QAE@XZ
??1X86Assembler@asmjit@@UAE@XZ
??1Zone@asmjit@@QAE@XZ
??_FVMemMgr@asmjit@@QAEXXZ
?_alloc@Zone@asmjit@@QAEPAXI@Z
?_emit@X86Assembler@asmjit@@UAEIIABUOperand@2@000@Z
?_grow@Assembler@asmjit@@QAEII@Z
?_grow@PodVectorBase@asmjit@@IAEIII@Z
?_newLabel@Assembler@asmjit@@QAEIPAULabel@2@@Z
?_newLabelLink@Assembler@asmjit@@QAEPAULabelLink@2@XZ
?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B
?_registerIndexedLabels@Assembler@asmjit@@QAEII@Z
?_relocCode@X86Assembler@asmjit@@UBEIPAX_K@Z
?_reserve@Assembler@asmjit@@QAEII@Z
?_reserve@PodVectorBase@asmjit@@IAEIII@Z
?_x86CondToCmovcc@asmjit@@3QBIB
?_x86CondToJcc@asmjit@@3QBIB
?_x86CondToSetcc@asmjit@@3QBIB
?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B
?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B
?_x86ReverseCond@asmjit@@3QBIB
?add@JitRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?add@StaticRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?align@X86Assembler@asmjit@@UAEIII@Z
?alloc@VMemMgr@asmjit@@QAEPAXII@Z
?alloc@VMemUtil@asmjit@@SAPAXIPAII@Z
?allocProcessMemory@VMemUtil@asmjit@@SAPAXPAXIPAII@Z
?allocZeroed@Zone@asmjit@@QAEPAXI@Z
?bind@Assembler@asmjit@@UAEIABULabel@2@@Z
?callCpuId@X86CpuUtil@asmjit@@SAXIIPATX86CpuId@2@@Z
?detect@X86CpuUtil@asmjit@@SAXPAUX86CpuInfo@2@@Z
?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ
?dup@Zone@asmjit@@QAEPAXPBXI@Z
?embed@Assembler@asmjit@@UAEIPBXI@Z
?embedLabel@X86Assembler@asmjit@@QAEIABULabel@2@@Z
?emit@Assembler@asmjit@@QAEII@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@_K@Z
?emit@Assembler@asmjit@@QAEIIH@Z
?emit@Assembler@asmjit@@QAEII_K@Z
?flush@HostRuntime@asmjit@@UAEXPAXI@Z
?getCpuInfo@HostRuntime@asmjit@@UAEPBUCpuInfo@2@XZ
?getHost@CpuInfo@asmjit@@SAPBU12@XZ
?getPageGranularity@VMemUtil@asmjit@@SAIXZ
?getPageSize@VMemUtil@asmjit@@SAIXZ
?getStackAlignment@HostRuntime@asmjit@@UAEIXZ
?make@Assembler@asmjit@@UAEPAXXZ
?noOperand@asmjit@@3UOperand@1@B
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KABUX86Reg@2@IHI@Z
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z
?release@JitRuntime@asmjit@@UAEIPAX@Z
?release@StaticRuntime@asmjit@@UAEIPAX@Z
?release@VMemMgr@asmjit@@QAEIPAX@Z
?release@VMemUtil@asmjit@@SAIPAXI@Z
?releaseProcessMemory@VMemUtil@asmjit@@SAIPAX0I@Z
?relocCode@Assembler@asmjit@@QBEIPAX_K@Z
?reset@Assembler@asmjit@@QAEX_N@Z
?reset@PodVectorBase@asmjit@@QAEX_N@Z
?reset@VMemMgr@asmjit@@QAEXXZ
?reset@Zone@asmjit@@QAEX_N@Z
?sdup@Zone@asmjit@@QAEPADPBD@Z
?setArch@X86Assembler@asmjit@@QAEII@Z
?setError@CodeGen@asmjit@@QAEIIPBD@Z
?setErrorHandler@CodeGen@asmjit@@QAEIPAUErrorHandler@2@@Z
?sformat@Zone@asmjit@@QAAPADPBDZZ
?shrink@VMemMgr@asmjit@@QAEIPAXI@Z
?x86RegData@asmjit@@3UX86RegData@1@B
�mm��c;�Osb�s�S"�`����?�[�́en~V�_�w\x���i��7{�T�����Ī��L�)j���M�� O �?-9E�|�7�NW�� �[��;p�����U�l{��`�(�<4�����(Z��2u�����`H*��P$�c�5��p��ɥ���0ǠU֙�E�G���q\{�U,}��:������lGX�����iٮ����|��3U6��a���A��?!�coFR&uึm�5'@û��tHlK�� �0N�`$����ڴ�����aA)# 0A���5�D��]#�G�%��Wq������~�*h�14=uj&�K���������p����m����#?��D�+��O~5�,���]���9�l���棏�uw��60Cnl�a�l&���"�B�Q�t����% �=��kU�(��_Rj0r5�r��CN.~-�"�l�i[pD��N3��H�a�/E�!�_�=,���oXjR'�H_�*�T-e��/0��'�� kVI9�f��z�ҽB����n3�BBd��W��эZ�an��n6��H��b�]z��=0��3����l�M�6��h���}������>9���i'$���b������2Z���12�<�ͤ�)hD��co&_�#�8F��A�ٷ�ǣ�$��j5ש�g�l&ݬ�;�v��P��_e��3��]�j����pw�������{+�����������q6 ��\��Y���<[email protected]�}�4@�rZ�����,�xQf���6��+������W[���U$"�N��O��=u�cur���j�s���TȨ/��� n��.D2��+����9�+�J�� �<A�ᑨi뻓_ P2�;G�4IՖ�<)X&砘8��7c<��_G,��'n\V%�0�.+>#�C���wi۽�6��Q8,�E#ef6H&�?a�Nm�JHDW��|Ys�I�η-� �Q���pH�`�˃_�~��҃�����m�x���ࢡe3��Ĭ��e�M��ܣfȤK�n����Xi0�L}����Aq��.�� �˳�٣K�>K��R�����]�ᄖ0����Z�qe��< ��ٶ��O���]�x=�`ۃKN:Eq�([*�̜֏W�?����O�J���v��/��P2q�xH��*%���v#�\pf�"w5۶A���b���+�1���#A�ٕ(�D��}���[�i\�af�|�!��#"k� 斱�%�hr��ӸgR�ɣ��f��Kɪ�|���j� �}���1��I5pt�Q�� g�Z��gn�c|6G�e|��0o��� �c7��~n�I��ƀrl�nȡ:9�nm�r�@e� �*[e�Y�r��[t�{�ϰ�6*Dj߳��x��g��|ym����W�J������sgh�o�@I��:��'�;_�J�(��L��f���uc5<����h����K���\/V�I=2�-����������.��̜vSĺ��Y�i_\*C�Ȗ����� ���.&h�/�2��{���Uw�>�|�2;���%�O15����48,��j��Wb)Kr²a� �q-f���x�B��~(���E�'q?��(��PW�~vY|uٕ]��B�Z�����6���2��6;D��6ޓ$r ���&��+k�K=Ͽ#�o�G���ӕ��g�Е�9���g��C��l#MR�A}��A������ѳ���1� ��v�=��,OF��v���A������,{���q�����dz�sC�ʩ�P��$B4��%AR�9��� E/(!2DG�������o9�\/�3��C�k����>����X�1����D�7m���N%c�p7!!�C���Q�Ʉ�K��q2��؛o�G�c�n�1"�m�Õ��w�W�v��L�;g��3�f�sf.X9�R�O��j���[��29����*�F�������Ǔ%�<��_�q�ޘ�b~�."�<��n�t'��V�+�<+9����<>=t �5����Il{��:%#�t$$�}S�S�X���d%����;�[]i�-�k�w���6������gh���1h�' @�,��.��d�6M5�oJ����Ut���_2�z�j7Q��6�d�Q$��/���E]U�H�(������� ����O,�u��r�+�z���\��u����:�Y�m��B��K�Zp\��c��˃��P�4h��Mz@��!=0��M+E�I�vE�$�^O����Tc�s�����:N?��(Z3F�'����Dmg�?��ڇ^F�Q�!�L��aoH�n@�a[�2:���<�ܨH��OAൎ����&�3���ƙ��N��c}�2����T�����ޯ`R"����-ð�1�����;�E�a���f���?n�`Z=�7�9׳AP�q9�b����b,$��e�6!�q:��]�D?�d���,|,����m�����HtH;��qaY^����TϨ�����NA9h�k���xW6���lq@�~���*�լ�9�u�f�20�������^��@��_h�s��n����.��{�2W{SE|�� O��n�!p����D��u J[G?�K`�����}a�D�K V:�ma�]�K��� �;g��F1sT��\;_�>�7y��$�W��gh}����S�}9dw)�t�@��1m����@ԍJ����ǐt���Gd]�,a ��K!���v 9kR<&�KEU�V1�h��m�?����-mž(����؋�jW?�e:}�n�*e�{kV���W�%�l�f���H�E5��s�+�*8"晩O�tz����gb���p�W�Z��Q7z:��?�@3KC�#�/�:a���YLg�8��z #wlj��i��MM�]��"�g��x���'"���Q�v�C����f*���ߌ_�� Kao��7����Z�7=�Q��34#�E�;i] �X��1ɼV|�O�(���?�N�Ȧz�e�H��g�Hy�P��G���q�9@5���`��e�+&�k�V$a� I��ME�Sf:�m*ͺ��/������$q{pZX4wt�<`Ȫ�D ������� ��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ