Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
961916b0646baca7cf777cf1abd3d980fd7586e4b73618d3ad22a5f7e9294bce.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
961916b0646baca7cf777cf1abd3d980fd7586e4b73618d3ad22a5f7e9294bce.exe
Resource
win10v2004-20220414-en
Target
961916b0646baca7cf777cf1abd3d980fd7586e4b73618d3ad22a5f7e9294bce
Size
1.3MB
MD5
057e931a8bb171c2f370e54ab5addbfa
SHA1
99a26715d07c74e05b8e3619b713328fc6b6019f
SHA256
961916b0646baca7cf777cf1abd3d980fd7586e4b73618d3ad22a5f7e9294bce
SHA512
7d495493c821cf7aace8414dfb33383737e4c66353145e3ee659385884dde22d93fc83dd1bebce830b80ad8c171327942afcb23aa3e70a454c936f3f63f4d9ed
SSDEEP
24576:4LXJ7b4IXFO6NfIgkeC60Vn4Oe9Mtw0NEMa22ghjYuTlUgFRnkwox8JtLcddTNWb:Mw6GgkeX64N+w0NEH2bhjnTv8woxGw/k
metasploit
encoder/shikata_ga_nai
metasploit
windows/reverse_tcp
192.168.1.176:4410
Processes:
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
SERIALNUMBER=407950,CN=Akeo Consulting,O=Akeo Consulting,ST=Donegal,C=IE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024945
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE