СТИКС.мод.zip
- SHA256 8b437110b82e99350d7fe474cd14175d93f8056a7be62b7566ceb436c09a153b
Behavioral task
behavioral1
Sample
СТИКС.мод.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
СТИКС.мод.zip
Resource
win11ltsc2024-20260709-en
| resource | yara_rule |
|---|---|
| static1/unpack001/СТИКС.мод/pawno/pawno.exe | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/СТИКС.мод/pawno/pawnc.dll |
| unpack001/СТИКС.мод/pawno/pawncc.exe |
| unpack001/СТИКС.мод/pawno/pawndisasm.exe |
| unpack001/СТИКС.мод/pawno/pawno.exe |
| unpack001/СТИКС.мод/plugins/crashdetect.dll |
| unpack001/СТИКС.мод/plugins/gvar.dll |
| unpack001/СТИКС.мод/plugins/mysql.dll |
| unpack001/СТИКС.мод/plugins/pawncmd.dll |
| unpack001/СТИКС.мод/plugins/pawnraknet.dll |
| unpack001/СТИКС.мод/plugins/profiler.dll |
| unpack001/СТИКС.мод/plugins/regex.dll |
| unpack001/СТИКС.мод/plugins/sampvoice.dll |
| unpack001/СТИКС.мод/plugins/sscanf.dll |
| unpack001/СТИКС.мод/plugins/streamer.dll |
| unpack001/СТИКС.мод/scriptfiles/plugins/crashdetect.dll |
| unpack001/СТИКС.мод/scriptfiles/plugins/mysql.dll |
| unpack001/СТИКС.мод/scriptfiles/plugins/pawncmd.dll |
| unpack001/СТИКС.мод/scriptfiles/plugins/pawnraknet.dll |
| unpack001/СТИКС.мод/scriptfiles/plugins/profiler.dll |
| unpack001/СТИКС.мод/scriptfiles/plugins/regex.dll |
| unpack001/СТИКС.мод/scriptfiles/plugins/sscanf.dll |
| unpack001/СТИКС.мод/scriptfiles/plugins/streamer.dll |
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=199, version=41118,
count=3, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=5, id=257, version=25711,
count=84, id=1, productName=Unmarked objects,
count=16, id=260, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Unsigned PE
Checks for missing Authenticode signature.
count=69, id=207, version=50929,
count=30, id=205, version=50929,
count=224, id=206, version=50929,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=104, id=1, productName=Unmarked objects,
count=14, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=18, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=12, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, version=25711,
count=59, id=1, productName=Unmarked objects,
count=2, id=260, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=3, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=23, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=164, id=1, productName=Unmarked objects,
count=23, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=4, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=53, id=1, productName=Unmarked objects,
count=2, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=207, productName=VS2012 build 50727, version=50727,
count=4, id=203, version=50929,
count=9, id=205, version=50929,
count=14, id=206, version=50929,
count=4, id=207, version=50929,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=180, id=1, productName=Unmarked objects,
count=12, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=241, version=40116,
count=131, id=243, version=40116,
count=29, id=242, version=40116,
count=20, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=46, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=31, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=265, version=26433,
count=1, id=256, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=255, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=258, productName=VS2017 v15.7.5 build 26433, version=26433,
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=241, version=40116,
count=150, id=243, version=40116,
count=29, id=242, version=40116,
count=23, id=259, version=25305,
count=60, id=261, version=25305,
count=32, id=260, version=25305,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=97, id=1, productName=Unmarked objects,
count=5, id=265, version=25507,
count=1, id=256, productName=VS2017 v15.3.3 build 25507, version=25507,
count=1, id=255, productName=VS2017 v15.3.3 build 25507, version=25507,
count=1, id=258, productName=VS2017 v15.3.3 build 25507, version=25507,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=3, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=156, id=1, productName=Unmarked objects,
count=19, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=34, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=123, productName=VS2005 build 50727, version=50727,
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=117, id=1, productName=Unmarked objects,
count=1, id=150, version=20413,
count=5, id=149, productName=VS2008 build 21022, version=21022,
count=13, id=131, productName=VS2008 build 21022, version=21022,
count=10, id=132, productName=VS2008 build 21022, version=21022,
count=2, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=28117,
count=8, id=259, version=28117,
count=27, id=261, version=28117,
count=4, id=257, version=28117,
count=5, id=257, version=26715,
count=117, id=1, productName=Unmarked objects,
count=25, id=265, version=28316,
count=1, id=256, productName=VS2019 v16.4.4 build 28316, version=28316,
count=1, id=255, productName=VS2019 v16.4.4 build 28316, version=28316,
count=1, id=258, productName=VS2019 v16.4.4 build 28316, version=28316,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=257, version=25711,
count=39, id=1, productName=Unmarked objects,
count=3, id=259, version=26706,
count=17, id=261, version=26706,
count=10, id=260, version=26706,
count=9, id=265, version=26730,
count=1, id=256, productName=VS2017 v15.8.9? build 26730, version=26730,
count=1, id=255, productName=VS2017 v15.8.9? build 26730, version=26730,
count=1, id=258, productName=VS2017 v15.8.9? build 26730, version=26730,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=24123,
count=6, id=259, version=24123,
count=18, id=261, version=24123,
count=11, id=260, version=24123,
count=3, id=203, version=65501,
count=111, id=1, productName=Unmarked objects,
count=1, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=260, version=24241,
count=2, id=261, version=24241,
count=1, id=256, version=24241,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, version=24241,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=3, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=23, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=164, id=1, productName=Unmarked objects,
count=23, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=207, productName=VS2012 build 50727, version=50727,
count=4, id=203, version=50929,
count=9, id=205, version=50929,
count=14, id=206, version=50929,
count=4, id=207, version=50929,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=180, id=1, productName=Unmarked objects,
count=12, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=241, version=40116,
count=131, id=243, version=40116,
count=29, id=242, version=40116,
count=20, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=46, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=31, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=265, version=26433,
count=1, id=256, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=255, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=258, productName=VS2017 v15.7.5 build 26433, version=26433,
Unsigned PE
Checks for missing Authenticode signature.
count=15, id=241, version=40116,
count=151, id=243, version=40116,
count=29, id=242, version=40116,
count=23, id=259, version=26706,
count=60, id=261, version=26706,
count=31, id=260, version=26706,
count=5, id=203, version=65501,
count=97, id=1, productName=Unmarked objects,
count=6, id=265, version=27038,
count=1, id=256, version=27038,
count=1, id=255, version=27038,
count=1, id=258, version=27038,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=3, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=156, id=1, productName=Unmarked objects,
count=19, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=34, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=123, productName=VS2005 build 50727, version=50727,
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=117, id=1, productName=Unmarked objects,
count=1, id=150, version=20413,
count=5, id=149, productName=VS2008 build 21022, version=21022,
count=13, id=131, productName=VS2008 build 21022, version=21022,
count=10, id=132, productName=VS2008 build 21022, version=21022,
count=2, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=257, version=25711,
count=39, id=1, productName=Unmarked objects,
count=3, id=259, version=26706,
count=17, id=261, version=26706,
count=10, id=260, version=26706,
count=9, id=265, version=26730,
count=1, id=256, productName=VS2017 v15.8.9? build 26730, version=26730,
count=1, id=255, productName=VS2017 v15.8.9? build 26730, version=26730,
count=1, id=258, productName=VS2017 v15.8.9? build 26730, version=26730,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=24123,
count=6, id=259, version=24123,
count=18, id=261, version=24123,
count=11, id=260, version=24123,
count=3, id=203, version=65501,
count=107, id=1, productName=Unmarked objects,
count=1, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=260, version=24241,
count=2, id=261, version=24241,
count=1, id=256, version=24241,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, version=24241,