Extended Key Usages
ExtKeyUsageCodeSigning
Overview
overview
3Static
static
3EFI/boot/bootia32.exe
windows7-x64
EFI/boot/bootia32.exe
windows10-2004-x64
EFI/boot/bootx64.exe
windows7-x64
EFI/boot/bootx64.exe
windows10-2004-x64
EFI/boot/grubia32.exe
windows7-x64
EFI/boot/grubia32.exe
windows10-2004-x64
boot/grub/...fi.ps1
windows7-x64
3boot/grub/...fi.ps1
windows10-2004-x64
3boot/grub/grub.vbs
windows7-x64
1boot/grub/grub.vbs
windows10-2004-x64
1boot/grub/...pi.mod
ubuntu-24.04-amd64
boot/grub/...32.mod
ubuntu-24.04-amd64
boot/grub/...er.mod
ubuntu-24.04-amd64
boot/grub/...ci.mod
ubuntu-24.04-amd64
boot/grub/...eo.mod
ubuntu-20.04-amd64
boot/grub/...ut.mod
ubuntu-24.04-amd64
boot/grub/...dr.mod
ubuntu-24.04-amd64
boot/grub/...lp.mod
ubuntu-24.04-amd64
boot/grub/...rd.mod
ubuntu-24.04-amd64
boot/grub/...ta.mod
ubuntu-20.04-amd64
boot/grub/...ce.mod
ubuntu-24.04-amd64
boot/grub/...fs.mod
ubuntu-22.04-amd64
boot/grub/...ap.mod
ubuntu-22.04-amd64
boot/grub/...le.mod
ubuntu-24.04-amd64
boot/grub/...li.mod
ubuntu-22.04-amd64
boot/grub/...st.mod
ubuntu-24.04-amd64
boot/grub/...ot.mod
ubuntu-22.04-amd64
boot/grub/...sd.mod
ubuntu-22.04-amd64
boot/grub/...st.mod
ubuntu-24.04-amd64
boot/grub/...fs.mod
ubuntu-24.04-amd64
boot/grub/...io.mod
ubuntu-24.04-amd64
boot/grub/...at.mod
ubuntu-24.04-amd64
Static task
static1
Behavioral task
behavioral1
Sample
EFI/boot/bootia32.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
EFI/boot/bootia32.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
EFI/boot/bootx64.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
EFI/boot/bootx64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
EFI/boot/grubia32.exe
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
EFI/boot/grubia32.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
boot/grub/boot-local-efi.ps1
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
boot/grub/boot-local-efi.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
boot/grub/grub.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
boot/grub/grub.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
boot/grub/i386-efi/acpi.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral12
Sample
boot/grub/i386-efi/adler32.mod
Resource
ubuntu2404-amd64-20240729-en
Behavioral task
behavioral13
Sample
boot/grub/i386-efi/afsplitter.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral14
Sample
boot/grub/i386-efi/ahci.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral15
Sample
boot/grub/i386-efi/all_video.mod
Resource
ubuntu2004-amd64-20240611-en
Behavioral task
behavioral16
Sample
boot/grub/i386-efi/aout.mod
Resource
ubuntu2404-amd64-20240729-en
Behavioral task
behavioral17
Sample
boot/grub/i386-efi/appleldr.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral18
Sample
boot/grub/i386-efi/archelp.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral19
Sample
boot/grub/i386-efi/at_keyboard.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral20
Sample
boot/grub/i386-efi/ata.mod
Resource
ubuntu2004-amd64-20240611-en
Behavioral task
behavioral21
Sample
boot/grub/i386-efi/backtrace.mod
Resource
ubuntu2404-amd64-20240729-en
Behavioral task
behavioral22
Sample
boot/grub/i386-efi/bfs.mod
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral23
Sample
boot/grub/i386-efi/bitmap.mod
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral24
Sample
boot/grub/i386-efi/bitmap_scale.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral25
Sample
boot/grub/i386-efi/bli.mod
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral26
Sample
boot/grub/i386-efi/blocklist.mod
Resource
ubuntu2404-amd64-20240729-en
Behavioral task
behavioral27
Sample
boot/grub/i386-efi/boot.mod
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral28
Sample
boot/grub/i386-efi/bsd.mod
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral29
Sample
boot/grub/i386-efi/bswap_test.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral30
Sample
boot/grub/i386-efi/btrfs.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral31
Sample
boot/grub/i386-efi/bufio.mod
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral32
Sample
boot/grub/i386-efi/cat.mod
Resource
ubuntu2404-amd64-20240523-en
Target
gparted-live-1.6.0-3-i686.iso
Size
483.0MB
MD5
0487d5385b57183d6c77662e1a6526f9
SHA1
6563c55ee18df7b18f21f8e71155b9937c3d2314
SHA256
1097cd7ea03ddded771fcdc067d97910b8fad067d72d1f5c09f20a0ed9dcaabe
SHA512
fb70d7762bb6a36a4034521a20902beb400631853bdf846446e884fb83f33801a9310d22baa0377610897d4e94d4442db64eca9ffc7fbde29b281acc63cb908f
SSDEEP
12582912:XhaLOEsCXkwSmCEdXYymviIXSFYwXjD4Hh:XEy3CvUlCWwXjD4H
Checks for missing Authenticode signature.
resource |
---|
unpack002/EFI/boot/bootx64.efi |
unpack002/live/mt86+x32.efi |
unpack002/live/mt86+x64.efi |
unpack002/live/vmlinuz |
unpack002/utils/win32/syslinux.exe |
unpack002/utils/win64/syslinux64.exe |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateFileA
DeleteCriticalSection
DeleteFileA
DeviceIoControl
EnterCriticalSection
FlushFileBuffers
FormatMessageA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetLastError
GetLogicalDrives
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFree
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetFileAttributesA
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_iob
_lock
_onexit
calloc
exit
fprintf
fputc
fputs
free
fwrite
getenv
isalpha
localeconv
malloc
memcmp
memcpy
memmove
setlocale
signal
sprintf
strchr
strcpy
strerror
strlen
strncmp
strtoul
_unlock
abort
atoi
tolower
vfprintf
wcslen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateFileA
DeleteCriticalSection
DeleteFileA
DeviceIoControl
EnterCriticalSection
FlushFileBuffers
FormatMessageA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetLastError
GetLogicalDrives
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFree
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFileAttributesA
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
__C_specific_handler
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
fputc
fputs
free
fwrite
getenv
isalpha
localeconv
malloc
memcmp
memcpy
memmove
signal
sprintf
strchr
strcpy
strerror
strlen
strncmp
strtoul
tolower
vfprintf
wcslen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE