Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Target
56453d38f9c815ecab89a08b0ee3f81a8d527a351ca9ca4d8d7434f87d36e5a0
Size
108KB
MD5
00ebce36f199dc5197076c464a284ac8
SHA1
f4b97ed60da777cafab359696159fab854224db0
SHA256
56453d38f9c815ecab89a08b0ee3f81a8d527a351ca9ca4d8d7434f87d36e5a0
SHA512
7de0a638ab078012069508594db720123be78e76b53a869a055f32dc6932b4314f79ab6e1bdfe4bbc80b996982226a74c5b691df858bf4ab9af1b5c26e8b72b2
SSDEEP
3072:8ucUJyHCrYS0VhOvfy9Mxs2rj90JSNyZopEb4CFfe3:8ucModspJNyZZFe3
redline
TEST1
86.107.197.196:63065
27ffc688a5404c680b9ac629d48e2917
Processes:
resource | yara_rule |
---|---|
sample | family_redline |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
CN=AMCERT\,LLC,O=AMCERT\,LLC,ST=Erevan,C=AM
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ