krx O_ o.zip
- SHA256 b1b5a03fb933ab7c7a6534390a0d9070baae500586bd01337502d2b2b6d7c9a4
| resource | yara_rule |
|---|---|
| static1/unpack001/krx O_ o/krx/unlicense.exe | pyinstaller |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/krx O_ o/avcodec-60.dll |
| unpack001/krx O_ o/avcodec-61.dll |
| unpack001/krx O_ o/avformat-60.dll |
| unpack001/krx O_ o/avformat-61.dll |
| unpack001/krx O_ o/avutil-58.dll |
| unpack001/krx O_ o/avutil-59.dll |
| unpack001/krx O_ o/krx/DDNet-Server.exe |
| unpack001/krx O_ o/krx/DDNet.exe |
| unpack001/krx O_ o/krx/SDL2.dll |
| unpack001/krx O_ o/krx/avcodec-60.dll |
| unpack001/krx O_ o/krx/avcodec-61.dll |
| unpack001/krx O_ o/krx/avformat-60.dll |
| unpack001/krx O_ o/krx/avformat-61.dll |
| unpack001/krx O_ o/krx/avutil-58.dll |
| unpack001/krx O_ o/krx/avutil-59.dll |
| unpack001/krx O_ o/krx/config_retrieve.exe |
| unpack001/krx O_ o/krx/config_store.exe |
| unpack001/krx O_ o/krx/data/krx/DDNet_original.exe |
| unpack001/krx O_ o/krx/demo_extract_chat.exe |
| unpack001/krx O_ o/krx/dilate.exe |
| unpack001/krx O_ o/krx/exchndl.dll |
| unpack001/krx O_ o/krx/krx.exe |
| unpack001/krx O_ o/krx/krx_clean.bin |
| unpack001/krx O_ o/krx/krx_hook.dll |
| unpack001/krx O_ o/krx/libcrypto-3-x64.dll |
| unpack001/krx O_ o/krx/libcurl.dll |
| unpack001/krx O_ o/krx/libfreetype.dll |
| unpack001/krx O_ o/krx/libogg.dll |
| unpack001/krx O_ o/krx/libopus.dll |
| unpack001/krx O_ o/krx/libopusfile.dll |
| unpack001/krx O_ o/krx/libpng16-16.dll |
| unpack001/krx O_ o/krx/libssl-3-x64.dll |
| unpack001/krx O_ o/krx/libssp-0.dll |
| unpack001/krx O_ o/krx/libwinpthread-1.dll |
| unpack001/krx O_ o/krx/loader.exe |
| unpack001/krx O_ o/krx/map_convert_07.exe |
| unpack001/krx O_ o/krx/map_create_pixelart.exe |
| unpack001/krx O_ o/krx/map_diff.exe |
| unpack001/krx O_ o/krx/map_extract.exe |
| unpack001/krx O_ o/krx/mgwhelp.dll |
| unpack001/krx O_ o/krx/monitor.exe |
| unpack001/krx O_ o/krx/sqlite3.dll |
| unpack001/krx O_ o/krx/steam_api.dll |
| unpack001/krx O_ o/krx/swresample-4.dll |
| unpack001/krx O_ o/krx/swresample-5.dll |
| unpack001/krx O_ o/krx/swscale-7.dll |
| unpack001/krx O_ o/krx/swscale-8.dll |
| unpack001/krx O_ o/krx/unlicense.exe |
| unpack001/krx O_ o/krx/unpacked_krx.exe |
| unpack001/krx O_ o/krx/zlib1.dll |
| unpack001/krx O_ o/krx_hook.dll |
| unpack001/krx O_ o/libcrypto-3-x64.dll |
| unpack001/krx O_ o/libcurl.dll |
| unpack001/krx O_ o/libfreetype.dll |
| unpack001/krx O_ o/libogg.dll |
| unpack001/krx O_ o/libopus.dll |
| unpack001/krx O_ o/libopusfile.dll |
| unpack001/krx O_ o/libpng16-16.dll |
| unpack001/krx O_ o/libssl-3-x64.dll |
| unpack001/krx O_ o/libssp-0.dll |
| unpack001/krx O_ o/libwinpthread-1.dll |
| unpack001/krx O_ o/loader.exe |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=183, id=261, version=33145,
count=39, id=260, version=33145,
count=24, id=259, version=33145,
count=4, id=253, version=35403,
count=12, id=259, version=35403,
count=16, id=260, version=35403,
count=98, id=261, version=35403,
count=1, id=262, version=33145,
count=23, id=257, version=33145,
count=247, id=1, productName=Unmarked objects,
count=70, productName=Unmarked objects (old),
count=1, id=261, version=35721,
count=17, id=260, version=35721,
count=128, id=265, version=35721,
count=1, id=255, version=35721,
count=2, id=151,
count=1, id=258, version=35721,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Mar 19, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=26715,
count=37, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1120, id=1, productName=Unmarked objects,
count=8, id=260, version=26715,
count=3, id=259, version=26715,
count=16, id=261, version=26715,
count=1, id=256, version=26715,
count=14, id=265, version=26715,
count=1, id=253, version=26715,
count=1, id=255, version=26715,
count=1, id=258, version=26715,
Mar 19, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=57, id=261, version=26028,
count=1, id=260, version=26028,
count=2, id=257, version=26715,
count=57, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1219, id=1, productName=Unmarked objects,
count=11, id=260, version=26715,
count=4, id=259, version=26715,
count=1, id=256, version=26715,
count=96, id=265, version=26715,
count=2, id=253, version=26715,
count=30, id=261, version=26715,
count=1, id=255, version=26715,
count=1, id=258, version=26715,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Apr 29, 2022
SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Apr 29, 2022
SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=27, id=260, version=27412,
count=21, id=259, version=27412,
count=136, id=261, version=27412,
count=31, id=261, version=26706,
count=14, id=260, version=26706,
count=8, id=259, version=26706,
count=17, id=257, version=27412,
count=204, id=1, productName=Unmarked objects,
count=13, id=260, version=27045,
count=489, productName=Unmarked objects (old),
count=1, id=256, version=27045,
count=1, id=258, version=27045,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=204, id=261, version=33145,
count=55, id=260, version=33145,
count=34, id=259, version=33145,
count=5, id=253, version=35403,
count=14, id=259, version=35403,
count=18, id=260, version=35403,
count=105, id=261, version=35403,
count=78, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=262, version=33145,
count=2, id=257, version=35213,
count=2, id=257, version=35717,
count=4, id=257, version=27045,
count=218, productName=Unmarked objects (old),
count=2, id=123, version=2207,
count=25, id=257, version=33145,
count=439, id=1, productName=Unmarked objects,
count=29, id=260, version=35717,
count=343, id=261, version=35717,
count=1, id=255, version=35717,
count=2, id=151,
count=1, id=258, version=35717,
Unsigned PE
Checks for missing Authenticode signature.
count=204, id=261, version=33145,
count=55, id=260, version=33145,
count=34, id=259, version=33145,
count=5, id=253, version=35403,
count=14, id=259, version=35403,
count=18, id=260, version=35403,
count=105, id=261, version=35403,
count=78, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=262, version=33145,
count=2, id=257, version=35213,
count=2, id=257, version=35717,
count=4, id=257, version=27045,
count=218, productName=Unmarked objects (old),
count=2, id=123, version=2207,
count=25, id=257, version=33145,
count=439, id=1, productName=Unmarked objects,
count=29, id=260, version=35717,
count=343, id=261, version=35717,
count=1, id=255, version=35717,
count=2, id=151,
count=1, id=258, version=35717,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=213, id=1, productName=Unmarked objects,
count=11, id=257, version=33140,
count=40, productName=Unmarked objects (old),
count=976, id=260, version=35213,
count=1, id=256, version=35213,
count=1, id=255, version=35213,
count=1, id=258, version=35213,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=6, id=253, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=14, id=257, version=33140,
count=7, id=257, version=35213,
count=443, id=1, productName=Unmarked objects,
count=179, id=260, version=35213,
count=1, id=256, version=35213,
count=1, id=255, version=35213,
count=1, id=151,
count=1, id=258, version=35213,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=4, id=257, version=33140,
count=3, id=257, version=35213,
count=638, id=1, productName=Unmarked objects,
count=107, id=260, version=35213,
count=1, id=256, version=35213,
count=1, id=255, version=35213,
count=1, id=258, version=35213,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Mar 19, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=46, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=26715,
count=15, id=260, version=26715,
count=266, id=1, productName=Unmarked objects,
count=9, id=257, version=26715,
count=10, id=261, version=26715,
count=1, id=256, version=26715,
count=30, id=265, version=26715,
count=1, id=255, version=26715,
count=1, id=258, version=26715,
Detects Pyinstaller
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=259, version=30795,
count=190, id=261, version=30795,
count=10, id=260, version=30795,
count=3, id=253, version=31823,
count=40, id=261, version=31823,
count=17, id=260, version=31823,
count=9, id=259, version=31823,
count=5, id=257, version=30795,
count=117, id=1, productName=Unmarked objects,
count=20, id=260, version=31943,
count=1, id=258, version=31943,
Unsigned PE
Checks for missing Authenticode signature.
Jun 13, 2022
CN=LunarG\, Inc.,O=LunarG\, Inc.,L=Fort Collins,ST=Colorado,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=167, id=261, version=28900,
count=12, id=259, version=28900,
count=14, id=260, version=28900,
count=31, id=261, version=26706,
count=15, id=260, version=26706,
count=8, id=259, version=26706,
count=7, id=257, version=28900,
count=120, id=1, productName=Unmarked objects,
count=16, id=260, version=27045,
count=1, id=259, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=213, id=1, productName=Unmarked objects,
count=11, id=257, version=33140,
count=40, productName=Unmarked objects (old),
count=976, id=260, version=35213,
count=1, id=256, version=35213,
count=1, id=255, version=35213,
count=1, id=258, version=35213,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=6, id=253, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=14, id=257, version=33140,
count=7, id=257, version=35213,
count=443, id=1, productName=Unmarked objects,
count=179, id=260, version=35213,
count=1, id=256, version=35213,
count=1, id=255, version=35213,
count=1, id=151,
count=1, id=258, version=35213,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=4, id=257, version=33140,
count=3, id=257, version=35213,
count=638, id=1, productName=Unmarked objects,
count=107, id=260, version=35213,
count=1, id=256, version=35213,
count=1, id=255, version=35213,
count=1, id=258, version=35213,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.