Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
c59d033fa3a58112f7520113699c74552c4d12bb10783fa880359ec94affe2a1.dll
Resource
win7-20220310-en
Target
220326-yrq65adcan_pw_infected.zip
Size
234KB
MD5
42f1777b11cc5de8ff4a66fca8aeb07d
SHA1
0ea8bacdc4401c7edc1a51840bd5f69c86bf9297
SHA256
413cb93236cc0af5f43b68658703c0c35236d6fe0a29ecaaa953affbd72708ec
SHA512
4683a2cfc509ab82f8ec7658489ff3d52963f1db7b8efcb0cbf988c3cb2ca2bf9e5ff4ec9c68c93d5012a3f17b8f7ec3282ab69f1d71d1e8874ab6f338fbd970
Processes:
resource | yara_rule |
---|---|
static1/unpack001/c59d033fa3a58112f7520113699c74552c4d12bb10783fa880359ec94affe2a1 | malware_Quakbot |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VirtualAllocEx
GetLastError
GetModuleHandleW
CountClipboardFormats
GetListBoxInfo
GetCapture
ShowCaret
PaintDesktop
GetDesktopWindow
IsCharAlphaNumericW
GetShellWindow
CreatePopupMenu
IsCharAlphaW
GetDoubleClickTime
IsCharUpperW
GetForegroundWindow
CharUpperW
OemKeyScan
GetCaretBlinkTime
GetMenuContextHelpId
IsCharLowerA
VkKeyScanW
IsClipboardFormatAvailable
LoadIconA
GetOpenClipboardWindow
GetLastActivePopup
GetStockObject
GetEnhMetaFileW
GetEnhMetaFileBits
BeginPath
DeleteDC
GetLayout
CreateMetaFileW
EndPage
CloseEnhMetaFile
CreateSolidBrush
SaveDC
GetStretchBltMode
GetTextCharset
CreatePolyPolygonRgn
GdiConvertEnhMetaFile
SetMagicColors
ArcTo
GetTransform
BitBlt
PlayEnhMetaFile
GdiConvertBitmapV5
AbortPath
CreateEnhMetaFileA
GdiEntry12
CreateICW
GetTextExtentExPointI
GetCharWidthW
GdiConvertAndCheckDC
GdiGetPageCount
FONTOBJ_pifi
GetFontUnicodeRanges
GetEnhMetaFilePixelFormat
SetLayoutWidth
GdiConvertDC
GdiConvertPalette
PtVisible
SetBrushOrgEx
IntersectClipRect
RemoveFontResourceA
RegOpenKeyA
DragAcceptFiles
DoEnvironmentSubstW
SHFreeNameMappings
ShellExecuteA
SHGetDesktopFolder
SHGetFileInfo
Shell_NotifyIcon
SHCreateDirectoryExA
SHGetInstanceExplorer
ExtractAssociatedIconExW
DragQueryFileW
SHFileOperation
ExtractIconEx
SHGetFolderPathA
FindExecutableW
SHGetDiskFreeSpaceExW
ExtractIconExW
ExtractIconA
SHIsFileAvailableOffline
StrStrA
StrChrIW
StrStrW
StrCmpNIA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ