KAMARI-DMA-ready.zip
- SHA256 d1570f79e84b6c4069f4ae8746554c6d1b1446a73eb1e8919221cc6597d5d5f0
Static task
static1
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/KAMARI DMA/kamari-dma.exe |
| unpack001/KAMARI DMA/leechcore_driver.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/KAMARI DMA/dbghelp.dll |
| unpack001/KAMARI DMA/symsrv.dll |
Jun 18, 2024
SERIALNUMBER=SC136640,CN=Future Technology Devices International Ltd,O=Future Technology Devices International Ltd,L=Glasgow,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=SC136640,CN=Future Technology Devices International Ltd,O=Future Technology Devices International Ltd,L=Glasgow,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=5, id=259, version=30795,
count=136, id=261, version=30795,
count=10, id=260, version=30795,
count=35, id=261, version=32533,
count=14, id=260, version=32533,
count=9, id=259, version=32533,
count=5, id=257, version=30795,
count=108, id=1, productName=Unmarked objects,
count=2, id=261, version=32824,
count=1, id=256, version=32824,
count=1, id=255, version=32824,
count=1, id=151,
count=1, id=258, version=32824,
Jun 30, 2025
SERIALNUMBER=SC136640,CN=Future Technology Devices International Ltd,O=Future Technology Devices International Ltd,L=Glasgow,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=SC136640,CN=Future Technology Devices International Ltd,O=Future Technology Devices International Ltd,L=Glasgow,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=141, id=261, version=33140,
count=12, id=260, version=33140,
count=8, id=259, version=33140,
count=9, id=259, version=35207,
count=15, id=260, version=35207,
count=33, id=261, version=35207,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33140,
count=115, id=1, productName=Unmarked objects,
count=3, id=265, version=35211,
count=1, id=256, version=35211,
count=1, id=255, version=35211,
count=1, id=151,
count=1, id=258, version=35211,
Aug 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=257, version=35207,
count=135, id=1, productName=Unmarked objects,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=73, id=261, version=35207,
count=1, id=256, version=35207,
count=1, id=255, version=35207,
count=1, id=258, version=35207,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Feb 1, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=52, id=171, version=20824,
count=1, id=170, version=20824,
count=1, id=158, version=20804,
count=15, id=171, version=20804,
count=260, id=1, productName=Unmarked objects,
count=7, id=156, version=20804,
count=63, id=170, version=20804,
count=1, id=155, version=20804,
count=45, id=175, version=20804,
count=1, id=126, version=50727,
count=1, id=154, version=20804,
count=1, id=157, version=20804,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=35207,
count=36, id=261, version=35207,
count=6, id=259, version=35207,
count=8, id=257, version=35207,
count=1, id=261, version=35222,
count=27, id=257, version=35222,
count=474, id=1, productName=Unmarked objects,
count=46, id=261, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
Aug 15, 2026
CN=Open Source Developer\, Ulf Frisk,O=Open Source Developer,L=Stockholm,ST=Stockholm,C=SE
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=19, id=257, version=33145,
count=169, id=1, productName=Unmarked objects,
count=22, id=264, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=5, id=257, version=33145,
count=60, id=1, productName=Unmarked objects,
count=3, id=264, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,
Jun 10, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=200, id=1, productName=Unmarked objects,
count=5, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=143, id=261, version=35207,
count=1, id=256, version=35207,
count=1, id=255, version=35207,
count=1, id=258, version=35207,
Jun 10, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=35207,
count=7, id=260, version=35207,
count=42, id=1, productName=Unmarked objects,
count=5, id=257, version=35207,
count=20, id=261, version=35207,
count=1, id=256, version=35207,
count=1, id=255, version=35207,
count=1, id=258, version=35207,
Jun 10, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35207,
count=8, id=260, version=35207,
count=109, id=1, productName=Unmarked objects,
count=7, id=257, version=35207,
count=22, id=261, version=35207,
count=1, id=256, version=35207,
count=1, id=255, version=35207,
count=1, id=258, version=35207,
Jun 10, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=4, id=257, version=30795,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35207,
count=8, id=260, version=35207,
count=102, id=1, productName=Unmarked objects,
count=7, id=257, version=35207,
count=29, id=261, version=35207,
count=1, id=256, version=35207,
count=1, id=255, version=35207,
count=1, id=258, version=35207,
Jun 10, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35207,
count=33, id=1, productName=Unmarked objects,
count=2, id=259, version=35207,
count=7, id=260, version=35207,
count=12, id=261, version=35207,
count=1, id=256, version=35207,
count=1, id=255, version=35207,
count=1, id=258, version=35207,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Feb 1, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=158, version=20804,
count=15, id=171, version=20804,
count=209, id=1, productName=Unmarked objects,
count=7, id=156, version=20804,
count=1, id=132, productName=VS2008 build 21022, version=21022,
count=58, id=170, version=20804,
count=1, id=155, version=20804,
count=14, id=175, version=20804,
count=1, id=126, version=50727,
count=1, id=154, version=20804,
count=1, id=157, version=20804,
Jun 21, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 21, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=239, version=40116,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=1, productName=Unmarked objects,
count=12, id=259, version=26504,
count=16, id=260, version=26504,
count=31, id=261, version=26504,
count=1, id=256, version=26504,
count=1, id=255, version=26504,
count=1, id=258, version=26504,
Jun 10, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=2, id=257, version=35207,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=53, id=1, productName=Unmarked objects,
count=7, id=260, version=35207,
count=27, id=261, version=35207,
count=5, id=259, version=35207,
count=1, id=256, version=35207,
count=1, id=255, version=35207,
count=1, id=258, version=35207,
Aug 25, 2026
CN=Open Source Developer\, Ulf Frisk,O=Open Source Developer,L=Stockholm,ST=Stockholm,C=SE
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=12, id=257, version=33145,
count=3, id=257, version=35228,
count=222, id=1, productName=Unmarked objects,
count=118, id=264, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,