Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
308c02df24ac0d5cf1ae21bff85ab88df85397bdfb5c041d0dbedcfc57143305.exe
Resource
win7-20220414-en
Target
308c02df24ac0d5cf1ae21bff85ab88df85397bdfb5c041d0dbedcfc57143305
Size
5.4MB
MD5
f352e78be2638e2a09c21a277d0e3a08
SHA1
9b971cbc10640f4c3df9349d066ca4ee39883ea3
SHA256
308c02df24ac0d5cf1ae21bff85ab88df85397bdfb5c041d0dbedcfc57143305
SHA512
388ef9ea7b79456cb0dcb511ba2afae5583dee9b2e4267e2ddc35a0f5f55345e0ffa4e8ad44de152421c496ab7aae5ba7073f5811fb759394ebeb58015d256e5
SSDEEP
98304:Mh2WRkOITYGaSLh0Ozh/Ya4ODv3ZabwVGMSgyjsQUnB712bcXlewCRdSj99uiagS:HYGL6QtYNODvDGYQUt12bEtCRO99RS
Processes:
resource | yara_rule |
---|---|
sample | themida |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Hubert Moszka Northwood,O=Hubert Moszka Northwood,POSTALCODE=64-100,STREET=Bohaterów Westerplatte 10/7,L=Leszno,ST=Wielkopolskie,C=PL
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Hubert Moszka Northwood,O=Hubert Moszka Northwood,POSTALCODE=64-100,STREET=Bohaterów Westerplatte 10/7,L=Leszno,ST=Wielkopolskie,C=PL
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ