Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
b388723551a4f3255525c6a50b48e58b02b132a8.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
b388723551a4f3255525c6a50b48e58b02b132a8.exe
Resource
win10v2004-20220414-en
Target
b388723551a4f3255525c6a50b48e58b02b132a8
Size
6.7MB
MD5
8abb9a077c2e55cce483f9b80f002236
SHA1
b388723551a4f3255525c6a50b48e58b02b132a8
SHA256
0f5f827620e6ecae9b58643c77b73f3bb4ba9d2acfd13671cde6676053fa1b0b
SHA512
85563bf040dd27a094aefeb52018dad5f29559cb724875c67e54342af17ac3200fcec399989daa9d8fd6fe31e80f894cb2b31ac64b3d28a1456be235d273f948
SSDEEP
98304:bCMdrWnjpZgTbqUXXTxTN/0dkpVWKUXRb8T+EGbDMt2LK+zgCRR+insPi0R4J2y5:XdWpZqzTk2WKUBbzF3XLT0csax+fcjj
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=GlassWire,O=GlassWire,L=AUSTIN,ST=Texas,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??_FEventLog@glasswire@@QAEXXZ
?dfunc@EventLog@glasswire@@AAEPAVEventLogPrivate@2@XZ
?dfunc@EventLog@glasswire@@ABEPBVEventLogPrivate@2@XZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ