Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
lianzhanst.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
lianzhanst.exe
Resource
win10v2004-20220414-en
Target
lianzhanst.exe
Size
3.6MB
MD5
96e4d115b0edc2d77fb7b447e11fda39
SHA1
b3ddf70a0c29b9ab5163702ae420717f39a3e2a4
SHA256
e5975f25c103fae9d95d4652ec3b9e4c479d445d61c88f08354835b85e4b7546
SHA512
beb44f9d0fdcf281513dc8776a6253d97096ea61c847158cc99eade7b083fcd47c5e91f6d20fb75d2d1cd6e0df10ccd50c281f2d343824f726571a6f2dda3723
SSDEEP
49152:xJatr4BuNWIoFpyAFMcToCpTNUVFegJu9yv/PtcLPpH12d42Pkg+SLT0Xvm:xcrcVtJMSo+T2iuwyfWLPpH12dZkgt4O
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
CN=杭州跃兔网络科技有限公司,O=杭州跃兔网络科技有限公司,L=杭州,ST=浙江,C=CN
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=杭州跃兔网络科技有限公司,O=杭州跃兔网络科技有限公司,L=杭州,ST=浙江,C=CN
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE