111.zip
- SHA256 1bc5307edd98df38a4bf57c76cac67b899643fce672b48e368bbe2482afb718f
Overview
overview
8Static
static
3111.zip
windows11-ltsc_2024-x64
8111/compile.bat
windows11-ltsc_2024-x64
3111/compil...er.bat
windows11-ltsc_2024-x64
3111/kdmapp...lp.dll
windows11-ltsc_2024-x64
1111/kdmapp...rv.dll
windows11-ltsc_2024-x64
6111/kdmapp...ld.sys
windows11-ltsc_2024-x64
8111/loader...er.exe
windows11-ltsc_2024-x64
8111/spoofer.sys
windows11-ltsc_2024-x64
8111/unload.exe
windows11-ltsc_2024-x64
8Static task
static1
Behavioral task
behavioral1
Sample
111.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
111/compile.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
111/compile_loader.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
111/kdmapper-source/kdmapper-master/DbgHelp/dbghelp.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
111/kdmapper-source/kdmapper-master/DbgHelp/symsrv.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
111/kdmapper-source/kdmapper-master/HelloWorld.sys
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
111/loader_spoofer.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
111/spoofer.sys
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
111/unload.exe
Resource
win11ltsc2024-20260709-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/111/kdmapper-source/kdmapper-master/HelloWorld.sys |
| unpack001/111/kdmapper.exe |
| unpack001/111/loader_spoofer.exe |
| unpack001/111/spoofer.sys |
| unpack001/111/unload.exe |
Apr 1, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=59, id=261, version=33030,
count=8, id=260, version=33030,
count=4, id=257, version=33136,
count=63, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1268, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=13, id=260, version=33136,
count=5, id=259, version=33136,
count=1, id=256, version=33136,
count=100, id=264, version=33136,
count=2, id=253, version=33136,
count=37, id=261, version=33136,
count=1, id=255, version=33136,
count=1, id=258, version=33136,
Apr 1, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=48, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, productName=Unmarked objects (old),
count=5, id=259, version=33136,
count=26, id=260, version=33136,
count=296, id=1, productName=Unmarked objects,
count=9, id=257, version=33136,
count=14, id=261, version=33136,
count=1, id=256, version=33136,
count=49, id=264, version=33136,
count=1, id=255, version=33136,
count=1, id=258, version=33136,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=257, version=27412,
count=2, id=1, productName=Unmarked objects,
count=1, id=261, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=258, productName=VS2019 v16.7.5 build 29112, version=29112,
Unsigned PE
Checks for missing Authenticode signature.
count=178, id=261, version=35222,
count=17, id=260, version=35222,
count=7, id=259, version=35222,
count=10, id=259, version=35721,
count=17, id=260, version=35721,
count=86, id=261, version=35721,
count=9, id=257, version=35222,
count=140, id=1, productName=Unmarked objects,
count=7, id=261, version=36252,
count=1, id=258, version=36252,
Unsigned PE
Checks for missing Authenticode signature.
count=179, id=261, version=35222,
count=17, id=260, version=35222,
count=7, id=259, version=35222,
count=10, id=259, version=35721,
count=17, id=260, version=35721,
count=83, id=261, version=35721,
count=5, id=257, version=35222,
count=129, id=1, productName=Unmarked objects,
count=1, id=261, version=36252,
count=1, id=258, version=36252,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=261, version=35222,
count=1, id=262, version=35222,
count=1, productName=Unmarked objects (old),
count=7, id=259, version=35222,
count=16, id=260, version=35222,
count=5, id=257, version=35222,
count=43, id=1, productName=Unmarked objects,
count=7, id=260, version=36252,
count=1, id=258, version=36252,
Unsigned PE
Checks for missing Authenticode signature.
count=167, id=261, version=35222,
count=17, id=260, version=35222,
count=7, id=259, version=35222,
count=3, id=257, version=35222,
count=96, id=1, productName=Unmarked objects,
count=10, id=259, version=35721,
count=16, id=260, version=35721,
count=80, id=261, version=35721,
count=1, id=261, version=36252,
count=1, id=258, version=36252,