Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ousaban.zip
Resource
win7-20240705-es
Behavioral task
behavioral2
Sample
ousaban.zip
Resource
win10v2004-20240802-es
Target
ousaban.zip
Size
14.4MB
MD5
1fca46f800149350f03096078139a80a
SHA1
3dad9f0e184841847d813cfbac589fc8a85a22d1
SHA256
cc189622ae810826969f66cdb3676880d0e4677c069ad261240226149bc59ff4
SHA512
d21714b36d9dd43814b4f79147a425b44b4413c39d90aaa967ed2947cac4467ff8cca9b6d549f1f2dced25c0a3ddf4e694524780f2badaf960166dd267b63cf7
SSDEEP
393216:WOOCqUhcAuUep7P+2vSiw6US9yeaEHKKXuejv:ROCHw+CEqyJEHKiRT
Checks for missing Authenticode signature.
resource |
---|
unpack001/python313.dll |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\a\1\b\bin\win32\pythonw.pdb
Py_Main
__current_exception
__current_exception_context
memset
_except_handler4_common
_set_app_type
_initialize_onexit_table
_c_exit
_crt_atexit
_controlfp_s
terminate
_seh_filter_exe
_register_thread_local_exe_atexit_callback
__p___argc
_configure_wide_argv
_cexit
__p___wargv
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_register_onexit_function
_initialize_wide_environment
__setusermatherr
__p__commode
_set_fmode
_configthreadlocale
_set_new_mode
GetCurrentThreadId
GetModuleHandleW
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
RegQueryValueExW
RegUnLoadKeyW
CharNextW
SetClassLongW
EnumDisplayMonitors
GetVersion
GetProcAddress
GetVersionExW
GetVersion
Sleep
UnrealizeObject
VerQueryValueW
NetApiBufferFree
OleUninitialize
Shell_NotifyIconW
SHGetFolderPathW
memset
InitializeFlatSB
OpenPrinterW
GetDefaultPrinterW
WSACleanup
MagSetImageScalingCallback
timeGetTime
WinHttpWriteData
Address: 0x000025F0
Address: 0x00060E00
Address: 0x00077A00
Address: 0x00081790
Address: 0x00081980
Address: 0x000819C0
Address: 0x000900C0
Address: 0x0009D8C0
Address: 0x000A27C0
Address: 0x000A2A20
Address: 0x000A2AB0
Address: 0x000A2AC0
Address: 0x000A2B30
Address: 0x000A2BB0
Address: 0x000A2C00
Address: 0x000DC950
Address: 0x000DC9B0
Address: 0x000DCA20
Address: 0x000DCA90
Address: 0x000DCCD0
Address: 0x000DCE70
Address: 0x000DCEE0
Address: 0x000DCFE0
Address: 0x000DD0E0
Address: 0x000DD170
Address: 0x000DD190
Address: 0x000DD1E0
Address: 0x000DD2A0
Address: 0x000DD360
Address: 0x000DD450
Address: 0x000DD630
Address: 0x000DD690
Address: 0x000DD760
Address: 0x000DD830
Address: 0x000DD980
Address: 0x000DDC90
Address: 0x000DDCF0
Address: 0x000DDE20
Address: 0x000DDEC0
Address: 0x000DDEE0
Address: 0x000DDF00
Address: 0x000DE100
Address: 0x000DE4D0
Address: 0x000DE540
Address: 0x000DE5B0
Address: 0x000DE620
Address: 0x000DE690
Address: 0x000DE6B0
Address: 0x000DE720
Address: 0x000DE790
Address: 0x000DE8B0
Address: 0x000DE970
Address: 0x000DE9E0
Address: 0x000DEA50
Address: 0x000DEAC0
Address: 0x000DEB30
Address: 0x000DEBD0
Address: 0x000DEC80
Address: 0x000DED30
Address: 0x000DEDE0
Address: 0x000DEE90
Address: 0x000DEF40
Address: 0x000DEFF0
Address: 0x000DF0B0
Address: 0x000DF160
Address: 0x000DF210
Address: 0x000DF2C0
Address: 0x000DF3A0
Address: 0x000DF4B0
Address: 0x000DF540
Address: 0x000DF5C0
Address: 0x000DF640
Address: 0x000DF6C0
Address: 0x000DF740
Address: 0x000DF770
Address: 0x000DF8A0
Address: 0x000DF8F0
Address: 0x000DF9D0
Address: 0x000DFD90
Address: 0x000DFFB0
Address: 0x000E0030
Address: 0x000E0060
Address: 0x000E0100
Address: 0x000E01A0
Address: 0x000E0290
Address: 0x000E03A0
Address: 0x000E0490
Address: 0x000E05B0
Address: 0x000E0670
Address: 0x000E0730
Address: 0x000E07F0
Address: 0x000E08B0
Address: 0x000E0980
Address: 0x000E0A50
Address: 0x000E0CB0
Address: 0x000E0D70
Address: 0x000E10B0
Address: 0x000E10D0
Address: 0x000E1100
Address: 0x000E1130
Address: 0x000E1150
Address: 0x000E1180
Address: 0x000E1220
Address: 0x000E12C0
Address: 0x000E1350
Address: 0x000E13F0
Address: 0x000E1490
Address: 0x000E1550
Address: 0x000E15A0
Address: 0x000E1670
Address: 0x000E1830
Address: 0x000E18A0
Address: 0x000E1910
Address: 0x000E1EB0
Address: 0x000E2100
Address: 0x000E2130
Address: 0x000E21E0
Address: 0x000E2280
Address: 0x000E22E0
Address: 0x000E2350
Address: 0x000E2400
Address: 0x000E3F50
Address: 0x000E4050
Address: 0x000E4140
Address: 0x000E4150
Address: 0x000E4170
Address: 0x000E4300
Address: 0x000ED9D0
Address: 0x000EDA70
Address: 0x000EDB60
Address: 0x000EE110
Address: 0x000EF4B0
Address: 0x000EF8E0
Address: 0x000EF960
Address: 0x000EF9A0
Address: 0x000EF9E0
Address: 0x000F4060
Address: 0x000F4120
Address: 0x000F4160
Address: 0x000F6570
Address: 0x000F66B0
Address: 0x000F67F0
Address: 0x000F6830
Address: 0x000F6C40
Address: 0x000F6C60
Address: 0x000F6C90
Address: 0x000F6E50
Address: 0x000F6EF0
Address: 0x000F6F20
Address: 0x000F7050
Address: 0x000F7090
Address: 0x000F71D0
Address: 0x000F7290
Address: 0x000F7400
Address: 0x000F7570
Address: 0x000F7720
Address: 0x000F7880
Address: 0x000F78E0
Address: 0x000F7A30
Address: 0x000F7A60
Address: 0x000F7A90
Address: 0x000F7B30
Address: 0x000F7C20
Address: 0x000F7F10
Address: 0x000F7F40
Address: 0x000F7F70
Address: 0x000F7FA0
Address: 0x000F8060
Address: 0x000F8120
Address: 0x000F81E0
Address: 0x000F8300
Address: 0x000F8510
Address: 0x000F85B0
Address: 0x000F8660
Address: 0x000F8690
Address: 0x000F88C0
Address: 0x000F88D0
Address: 0x000F8990
Address: 0x000F8A00
Address: 0x000F8B00
Address: 0x000F8BA0
Address: 0x000F8C40
Address: 0x000F8CE0
Address: 0x000F8DA0
Address: 0x000F8E40
Address: 0x000F8EE0
Address: 0x000F8F80
Address: 0x000F9090
Address: 0x000F9390
Address: 0x000F9510
Address: 0x000F9570
Address: 0x000F9C80
Address: 0x000F9CD0
Address: 0x000F9E80
Address: 0x000FA2F0
Address: 0x000FA360
Address: 0x000FB0F0
Address: 0x000FB1B0
Address: 0x000FBD90
Address: 0x000FC210
Address: 0x000FC260
Address: 0x000FC4A0
Address: 0x000FC500
Address: 0x000FC7B0
Address: 0x000FCEE0
Address: 0x000FCF60
Address: 0x000FD0D0
Address: 0x000FD140
Address: 0x000FD1B0
Address: 0x000FD4A0
Address: 0x000FE680
Address: 0x000FECC0
Address: 0x000FECF0
Address: 0x000FED20
Address: 0x000FED40
Address: 0x000FED80
Address: 0x000FEEA0
Address: 0x000FF0C0
Address: 0x000FF1D0
Address: 0x000FF260
Address: 0x000FF2A0
Address: 0x000FF360
Address: 0x000FF5F0
Address: 0x001020E0
Address: 0x00102190
Address: 0x001021C0
Address: 0x00102220
Address: 0x00102250
Address: 0x00102280
Address: 0x00102710
Address: 0x00102C10
Address: 0x001044C0
Address: 0x00105800
Address: 0x00105830
Address: 0x00105A00
Address: 0x00105A60
Address: 0x00105AC0
Address: 0x00105BA0
Address: 0x00105C30
Address: 0x00105C80
Address: 0x00105DB0
Address: 0x00105DD0
Address: 0x00105E50
Address: 0x001060A0
Address: 0x001060E0
Address: 0x001061C0
Address: 0x001063E0
Address: 0x00106500
Address: 0x00106690
Address: 0x001066F0
Address: 0x001074E0
Address: 0x001075F0
Address: 0x00107960
Address: 0x00107DE0
Address: 0x00108410
Address: 0x00108440
Address: 0x00108480
Address: 0x00108730
Address: 0x00108790
Address: 0x00108EB0
Address: 0x00108ED0
Address: 0x00109280
Address: 0x00109390
Address: 0x001093F0
Address: 0x001096B0
Address: 0x00109710
Address: 0x00109770
Address: 0x001097F0
Address: 0x0010B7A0
Address: 0x0010BA60
Address: 0x0010BAD0
Address: 0x0010BB90
Address: 0x0010BCF0
Address: 0x0010BE00
Address: 0x0010BF10
Address: 0x0010BFC0
Address: 0x0010D990
Address: 0x0010D9B0
Address: 0x0010DA80
Address: 0x0010DAA0
Address: 0x0010DAE0
Address: 0x0010DB00
Address: 0x0010DB40
Address: 0x0010DB60
Address: 0x0010DBA0
Address: 0x0010F1F0
Address: 0x001115C0
Address: 0x00111630
Address: 0x001116A0
Address: 0x00111710
Address: 0x00111780
Address: 0x001117F0
Address: 0x00111880
Address: 0x00111910
Address: 0x00111920
Address: 0x00111930
Address: 0x00111940
Address: 0x00111950
Address: 0x001119F0
Address: 0x00111A90
Address: 0x00111AA0
Address: 0x00111AB0
Address: 0x00111AC0
Address: 0x00111AD0
Address: 0x00111B40
Address: 0x00111BB0
Address: 0x00111C20
Address: 0x00111C70
Address: 0x00111CC0
Address: 0x001124A0
Address: 0x00113390
Address: 0x00113410
Address: 0x001136F0
Address: 0x00113800
Address: 0x001138A0
Address: 0x00113B00
Address: 0x00113B30
Address: 0x00113BC0
Address: 0x00113C60
Address: 0x00113F30
Address: 0x00113FA0
Address: 0x00114040
Address: 0x00114880
Address: 0x00114890
Address: 0x001148A0
Address: 0x001149C0
Address: 0x00114B50
Address: 0x00114DC0
Address: 0x00114E50
Address: 0x00117340
Address: 0x00117620
Address: 0x00117890
Address: 0x00117B30
Address: 0x00117C50
Address: 0x00117DB0
Address: 0x00117FF0
Address: 0x00119960
Address: 0x00119F40
Address: 0x0011A030
Address: 0x0011A080
Address: 0x0011A100
Address: 0x0011A440
Address: 0x0011A480
Address: 0x0011A4B0
Address: 0x0011A4D0
Address: 0x0011A540
Address: 0x0011A5A0
Address: 0x0011A5D0
Address: 0x0011A600
Address: 0x0011A620
Address: 0x0011A7C0
Address: 0x0011A880
Address: 0x0011AAE0
Address: 0x0011ADD0
Address: 0x0011AE80
Address: 0x0011AEA0
Address: 0x0011AEF0
Address: 0x0011AF40
Address: 0x0011AF90
Address: 0x0011AFE0
Address: 0x0011B100
Address: 0x0011B150
Address: 0x0011B1A0
Address: 0x0011B330
Address: 0x0011B380
Address: 0x0011B540
Address: 0x0011B590
Address: 0x0011CE00
Address: 0x0011D1C0
Address: 0x0011EBF0
Address: 0x0011EC50
Address: 0x0011F5C0
Address: 0x0011FC50
Address: 0x0011FD20
Address: 0x001203D0
Address: 0x001203F0
Address: 0x00120430
Address: 0x001209A0
Address: 0x00120D80
Address: 0x001220C0
Address: 0x00122120
Address: 0x001221E0
Address: 0x00122220
Address: 0x00122510
Address: 0x001234F0
Address: 0x001236E0
Address: 0x00123730
Address: 0x001237C0
Address: 0x001238A0
Address: 0x00123A30
Address: 0x00123A90
Address: 0x00123AE0
Address: 0x00124090
Address: 0x00124790
Address: 0x00124C90
Address: 0x00124CB0
Address: 0x00124D10
Address: 0x001266B0
Address: 0x00126730
Address: 0x001267A0
Address: 0x00126800
Address: 0x001280A0
Address: 0x00128160
Address: 0x001281E0
Address: 0x00128480
Address: 0x00128500
Address: 0x00128560
Address: 0x001285F0
Address: 0x00128650
Address: 0x00128800
Address: 0x00128920
Address: 0x00128980
Address: 0x001289D0
Address: 0x00128AF0
Address: 0x00128BD0
Address: 0x00128D40
Address: 0x00128DE0
Address: 0x00128E00
Address: 0x00128E60
Address: 0x00129180
Address: 0x001293B0
Address: 0x001295C0
Address: 0x00129640
Address: 0x001296C0
Address: 0x001296D0
Address: 0x00129730
Address: 0x00129840
Address: 0x001298D0
Address: 0x001299D0
Address: 0x00129B50
Address: 0x00129C00
Address: 0x00129DB0
Address: 0x00129E50
Address: 0x00129ED0
Address: 0x00129F50
Address: 0x00129FE0
Address: 0x0012B740
Address: 0x0012C0F0
Address: 0x0012C560
Address: 0x0012CDC0
Address: 0x0012D000
Address: 0x0012D690
Address: 0x0012D790
Address: 0x0012E230
Address: 0x001309E0
Address: 0x00130C90
Address: 0x001312D0
Address: 0x00131EF0
Address: 0x001327D0
Address: 0x00132860
Address: 0x00132870
Address: 0x00133900
Address: 0x001339D0
Address: 0x00133B40
Address: 0x00133D50
Address: 0x00133E10
Address: 0x00137F00
Address: 0x00137F20
Address: 0x00137F40
Address: 0x001380D0
Address: 0x00138130
Address: 0x001381A0
Address: 0x00138CE0
Address: 0x00138EB0
Address: 0x00138F10
Address: 0x00139070
Address: 0x001392B0
Address: 0x001395B0
Address: 0x00139740
Address: 0x001397A0
Address: 0x00139820
Address: 0x00139880
Address: 0x00139970
Address: 0x001399B0
Address: 0x00139AE0
Address: 0x00139B30
Address: 0x00139B90
Address: 0x0013B100
Address: 0x0013B320
Address: 0x0013B340
Address: 0x0013B370
Address: 0x0013B390
Address: 0x0013B3C0
Address: 0x0013B430
Address: 0x0013B4A0
Address: 0x0013B530
Address: 0x0013B5D0
Address: 0x0013B610
Address: 0x0013B6A0
Address: 0x0013B820
Address: 0x0013B830
Address: 0x0013B880
Address: 0x0013BA70
Address: 0x0013BB90
Address: 0x0013BCB0
Address: 0x0013BD40
Address: 0x0013C0C0
Address: 0x0013C320
Address: 0x0013C3C0
Address: 0x0013C4D0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\a\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb
terminate
abort
calloc
malloc
free
strcpy_s
strncmp
wcsncmp
__stdio_common_vsprintf
__stdio_common_vsprintf_s
atol
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
RtlUnwind
VirtualQuery
EncodePointer
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
EnterCriticalSection
TlsGetValue
DeleteCriticalSection
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsSetValue
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_purecall
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_purecall_handler
_set_se_translator
_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ