Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2eaf7d2e8421489c86a69226830ff468ac7113fb8573bd4c96ff290cb5a5ca0f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2eaf7d2e8421489c86a69226830ff468ac7113fb8573bd4c96ff290cb5a5ca0f.exe
Resource
win10v2004-20220414-en
Target
2eaf7d2e8421489c86a69226830ff468ac7113fb8573bd4c96ff290cb5a5ca0f
Size
9.4MB
MD5
41f475e03ac7f4bb8a968bfe32672ae6
SHA1
339ef141aad6d2b33e408670d618becb71fb9475
SHA256
2eaf7d2e8421489c86a69226830ff468ac7113fb8573bd4c96ff290cb5a5ca0f
SHA512
4c4fd3dc9c6c16e705c6c150b77df182947efa91c0eda82225b02bb96a35cc7109b1b4dd64b7b9b17adde8b64a54e409db20895173d8ba6c8df08f470f0fde18
SSDEEP
196608:vZQTuuQNZhtDW5Mfgpthswre9gbjj3gYby5svXyHZzbdbnAST6ULus:vOTjQNbtDW5pptmIe9gDj+hZzbdLP6o
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=110111-2545155,CN=Smilegate Entertainment\, Inc.,O=Smilegate Entertainment\, Inc.,L=Seongnam-si,ST=Gyeonggi-do,C=KR,1.3.6.1.4.1.311.60.2.1.1=#130b53656f6e676e616d2d7369,1.3.6.1.4.1.311.60.2.1.2=#130b4779656f6e6767692d646f,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=110111-2545155,CN=Smilegate Entertainment\, Inc.,O=Smilegate Entertainment\, Inc.,L=Seongnam-si,ST=Gyeonggi-do,C=KR,1.3.6.1.4.1.311.60.2.1.1=#130b53656f6e676e616d2d7369,1.3.6.1.4.1.311.60.2.1.2=#130b4779656f6e6767692d646f,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
??0CFWebArgument@WebView@@QEAA@$$QEAV01@@Z
??0CFWebArgument@WebView@@QEAA@AEBV01@@Z
??0CFWebArgument@WebView@@QEAA@XZ
??0CFWebView@WebView@@QEAA@AEBV01@@Z
??0CFWebView@WebView@@QEAA@XZ
??0CFWebViewCallback@WebView@@QEAA@$$QEAV01@@Z
??0CFWebViewCallback@WebView@@QEAA@AEBV01@@Z
??0CFWebViewCallback@WebView@@QEAA@XZ
??1CFWebView@WebView@@UEAA@XZ
??4CFWebArgument@WebView@@QEAAAEAV01@$$QEAV01@@Z
??4CFWebArgument@WebView@@QEAAAEAV01@AEBV01@@Z
??4CFWebView@WebView@@QEAAAEAV01@AEBV01@@Z
??4CFWebViewCallback@WebView@@QEAAAEAV01@$$QEAV01@@Z
??4CFWebViewCallback@WebView@@QEAAAEAV01@AEBV01@@Z
??_7CFWebArgument@WebView@@6B@
??_7CFWebView@WebView@@6B@
??_7CFWebViewCallback@WebView@@6B@
?GetData@CFWebView@WebView@@QEBA_KXZ
?IsBoolean@CFWebArgument@WebView@@QEBA_NXZ
?IsNumber@CFWebArgument@WebView@@QEBA_NXZ
?IsString@CFWebArgument@WebView@@QEBA_NXZ
?RequestResource@CFWebViewCallback@WebView@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$vector@DV?$allocator@D@std@@@4@@Z
?SetData@CFWebView@WebView@@QEAAX_K@Z
LTGetILTMemory
SetMasterDatabase
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ