Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
c983151c8a62d03bb264c00c5b6d0093a64b6ea3091b827ac363e1ea22ee8773.exe
Resource
win7-20220715-en
Target
c983151c8a62d03bb264c00c5b6d0093a64b6ea3091b827ac363e1ea22ee8773
Size
2.8MB
MD5
eba22b7958d87705e32f07f9d9972dfe
SHA1
9ff067dea822e434ff5b4c95fdb857502767f3b4
SHA256
c983151c8a62d03bb264c00c5b6d0093a64b6ea3091b827ac363e1ea22ee8773
SHA512
9195209c7499e79d9e8194caef6065f358ec87c32f27357d98dcf3322a411d8be57d62e35d7b6af9e8284377765640d6e6402415b9c33209cbb8cf735ec1b353
SSDEEP
49152:zrE/2WjefiVs6z/DJ4i/3sV1BiTesQpdY7eaa+mJ:zrE/nj0iPz/d4ivsXQysmHHJ
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE