Package_Opening_Record_mp4.zip
- SHA256 d1c857a64cfd3454de68c0895374ada6771c89574d707ae44cd4a09a4fbf57ff
Static task
static1
Behavioral task
behavioral1
Sample
Package_Opening_Record_mp4.zip
Resource
win11ltsc2024-20260911-ja
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/Package_Opening_Record_mp4/krpt.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Package_Opening_Record_mp4/krpt.dll |
May 18, 2020
CN=Zhuhai Kingsoft Office Software Co.\, Ltd.,O=Zhuhai Kingsoft Office Software Co.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
May 18, 2020
CN=Zhuhai Kingsoft Office Software Co.\, Ltd.,O=Zhuhai Kingsoft Office Software Co.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=259, version=33145,
count=137, id=261, version=33145,
count=19, id=260, version=33145,
count=20, id=259, version=35207,
count=15, id=260, version=35207,
count=30, id=261, version=35207,
count=3, id=257, version=33145,
count=88, id=1, productName=Unmarked objects,
count=6, id=260, version=35229,
count=1, id=256, version=35229,
count=1, id=255, version=35229,
count=1, id=258, version=35229,
Dec 6, 2025
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=152, id=261, version=33145,
count=2, id=253, version=35207,
count=8, id=259, version=35207,
count=17, id=260, version=35207,
count=52, id=261, version=35207,
count=11, id=259, version=33145,
count=14, id=260, version=33145,
count=11, id=257, version=33145,
count=192, id=1, productName=Unmarked objects,
count=75, id=261, version=35221,
count=1, id=255, version=35221,
count=1, id=258, version=35221,