Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
cb691234a2b71c78e2b8dc385a3a619cedc01cbec7c4eddef5c93ce9261bf50d.exe
Resource
win7-20220718-en
Target
cb691234a2b71c78e2b8dc385a3a619cedc01cbec7c4eddef5c93ce9261bf50d
Size
5.9MB
MD5
cfc12312e1e6b7e6cb2233edd2e2b157
SHA1
b1cdda4c80c4a0e132d62d33e53ab092b00b6efd
SHA256
cb691234a2b71c78e2b8dc385a3a619cedc01cbec7c4eddef5c93ce9261bf50d
SHA512
5bc0a02e6bd54beaad09d7a917f84f8cc30ba7785b6f2a35e8b5f230703e286ab006b41b9121f30ee84327878b2802f9ddb9ec0322808044bc04a768b722f912
SSDEEP
98304:HJUKA9w72nZi2JHpjLpr/K9Rqas8hCDp/QngJ//fO3TZ99Amj7p17zEgmOwF:HJUKow72NpZr/K9wjGy9oM/Etj7vzE0O
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE