anhcuoi-windows.zip
- SHA256 95a431bf6409ec39263ce1a559d6207ea640d0be8416eec187978f4fa5576398
Overview
overview
8Static
static
8anhcuoi/ap...x.html
windows10-2004-x64
3anhcuoi/ap...x.html
windows11-ltsc_2024-x64
3anhcuoi/ap...app.js
windows10-2004-x64
3anhcuoi/ap...app.js
windows11-ltsc_2024-x64
3anhcuoi/ap...oad.js
windows10-2004-x64
3anhcuoi/ap...oad.js
windows11-ltsc_2024-x64
3anhcuoi/ap...fig.js
windows10-2004-x64
3anhcuoi/ap...fig.js
windows11-ltsc_2024-x64
3anhcuoi/ap...nts.js
windows10-2004-x64
3anhcuoi/ap...nts.js
windows11-ltsc_2024-x64
3anhcuoi/ap...ent.js
windows10-2004-x64
3anhcuoi/ap...ent.js
windows11-ltsc_2024-x64
3anhcuoi/ap...ase.js
windows10-2004-x64
3anhcuoi/ap...ase.js
windows11-ltsc_2024-x64
3anhcuoi/ap...pes.js
windows10-2004-x64
3anhcuoi/ap...pes.js
windows11-ltsc_2024-x64
3anhcuoi/ap...ars.js
windows10-2004-x64
3anhcuoi/ap...ars.js
windows11-ltsc_2024-x64
3anhcuoi/ap...oks.js
windows10-2004-x64
3anhcuoi/ap...oks.js
windows11-ltsc_2024-x64
3anhcuoi/ap...x.html
windows10-2004-x64
3anhcuoi/ap...x.html
windows11-ltsc_2024-x64
3anhcuoi/ap...hed.js
windows10-2004-x64
3anhcuoi/ap...hed.js
windows11-ltsc_2024-x64
3anhcuoi/ap...ion.js
windows10-2004-x64
3anhcuoi/ap...ion.js
windows11-ltsc_2024-x64
3anhcuoi/ap...mes.js
windows10-2004-x64
3anhcuoi/ap...mes.js
windows11-ltsc_2024-x64
3anhcuoi/ap...ler.js
windows10-2004-x64
3anhcuoi/ap...ler.js
windows11-ltsc_2024-x64
3anhcuoi/ap...tes.js
windows10-2004-x64
3anhcuoi/ap...tes.js
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
anhcuoi/application/cache/index.html
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
anhcuoi/application/cache/index.html
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
anhcuoi/application/config/app.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
anhcuoi/application/config/app.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
anhcuoi/application/config/autoload.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
anhcuoi/application/config/autoload.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
anhcuoi/application/config/config.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
anhcuoi/application/config/config.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
anhcuoi/application/config/constants.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
anhcuoi/application/config/constants.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
anhcuoi/application/config/content.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
anhcuoi/application/config/content.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
anhcuoi/application/config/database.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
anhcuoi/application/config/database.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
anhcuoi/application/config/doctypes.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
anhcuoi/application/config/doctypes.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
anhcuoi/application/config/foreign_chars.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
anhcuoi/application/config/foreign_chars.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
anhcuoi/application/config/hooks.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
anhcuoi/application/config/hooks.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
anhcuoi/application/config/index.html
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
anhcuoi/application/config/index.html
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
anhcuoi/application/config/memcached.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
anhcuoi/application/config/memcached.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
anhcuoi/application/config/migration.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
anhcuoi/application/config/migration.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
anhcuoi/application/config/mimes.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
anhcuoi/application/config/mimes.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
anhcuoi/application/config/profiler.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
anhcuoi/application/config/profiler.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
anhcuoi/application/config/routes.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
anhcuoi/application/config/routes.js
Resource
win11ltsc2024-20260911-en
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
| resource | yara_rule |
|---|---|
| static1/unpack001/anhcuoi/php/ext/php_fileinfo.dll | patched_upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/anhcuoi/php/ext/php_curl.dll |
| unpack001/anhcuoi/php/ext/php_exif.dll |
| unpack001/anhcuoi/php/ext/php_fileinfo.dll |
| unpack001/anhcuoi/php/ext/php_gd.dll |
| unpack001/anhcuoi/php/ext/php_mbstring.dll |
| unpack001/anhcuoi/php/ext/php_openssl.dll |
| unpack001/anhcuoi/php/ext/php_pdo_sqlite.dll |
| unpack001/anhcuoi/php/ext/php_sqlite3.dll |
| unpack001/anhcuoi/php/ext/php_zip.dll |
| unpack001/anhcuoi/php/libcrypto-3-x64.dll |
| unpack001/anhcuoi/php/libsqlite3.dll |
| unpack001/anhcuoi/php/libssh2.dll |
| unpack001/anhcuoi/php/libssl-3-x64.dll |
| unpack001/anhcuoi/php/nghttp2.dll |
| unpack001/anhcuoi/php/php.exe |
| unpack001/anhcuoi/php/php8.dll |
Aug 14, 2026
SERIALNUMBER=4710875,CN=Cloudflare\, Inc.,O=Cloudflare\, Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=4710875,CN=Cloudflare\, Inc.,O=Cloudflare\, Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=7, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30146,
count=2, id=257, version=30145,
count=14, id=257, version=30795,
count=4, id=257, version=30147,
count=119, id=260, version=30146,
count=3, id=257, version=30151,
count=577, id=1, productName=Unmarked objects,
count=4, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=121, id=1, productName=Unmarked objects,
count=1, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=161, id=1, productName=Unmarked objects,
count=20, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=4, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=288, id=260, productName=VS2019 v16.10.3 build 30038, version=30038,
count=72, id=260, productName=VS2019 v16.4.3 build 28315, version=28315,
count=25, id=260, version=30140,
count=49, productName=Unmarked objects (old),
count=46, id=260, productName=VS2019 v16.9.4 build 29914, version=29914,
count=3, id=257, version=30151,
count=279, id=1, productName=Unmarked objects,
count=67, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=42, id=260, version=30141,
count=3, id=257, version=30151,
count=172, id=1, productName=Unmarked objects,
count=61, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=4, id=257, version=30147,
count=3, id=257, version=30151,
count=579, id=1, productName=Unmarked objects,
count=2, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, version=30146,
count=3, id=257, version=30151,
count=141, id=1, productName=Unmarked objects,
count=3, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, version=30146,
count=3, id=257, version=30151,
count=181, id=1, productName=Unmarked objects,
count=1, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=54, id=260, productName=VS2019 v16.5.5 build 28614, version=28614,
count=7, id=260, productName=VS2019 v16.1.2 build 27702, version=27702,
count=105, id=260, version=30141,
count=3, id=257, version=30151,
count=206, id=1, productName=Unmarked objects,
count=2, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=197, id=1, productName=Unmarked objects,
count=13, id=257, version=30795,
count=33, productName=Unmarked objects (old),
count=875, id=260, version=30147,
count=1, id=256, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=29395,
count=113, id=1, productName=Unmarked objects,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=1, id=264, version=30146,
count=1, id=256, version=30146,
count=1, id=258, version=30146,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=26213,
count=8, id=260, version=30141,
count=3, id=257, version=30145,
count=204, id=1, productName=Unmarked objects,
count=24, id=260, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=151,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=3, id=257, version=30147,
count=539, id=1, productName=Unmarked objects,
count=49, id=260, version=30147,
count=1, id=256, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=26213,
count=47, id=1, productName=Unmarked objects,
count=23, id=260, version=30146,
count=1, id=256, version=30146,
count=1, id=255, version=30146,
count=1, id=151,
count=1, id=258, version=30146,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=5, id=253, version=28518,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=3, id=257, version=30151,
count=277, id=1, productName=Unmarked objects,
count=5, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=24, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=260, productName=VS2019 v16.1.2 build 27702, version=27702,
count=41, id=260, version=30146,
count=18, id=260, version=30141,
count=427, id=1, productName=Unmarked objects,
count=17, id=257, version=30795,
count=131, id=269, version=30151,
count=264, id=260, version=30151,
count=2, id=259, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,