Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
6c98b5bffd2f5ce6e666272ac4a71fe885b931f49ea46aa2bad7370178967fe7.exe
Resource
win7-20220718-en
Target
6c98b5bffd2f5ce6e666272ac4a71fe885b931f49ea46aa2bad7370178967fe7
Size
5.9MB
MD5
c313d53fa46232eda3ae3110405208c5
SHA1
e08b27c7dce34a572c457beee171018fab002298
SHA256
6c98b5bffd2f5ce6e666272ac4a71fe885b931f49ea46aa2bad7370178967fe7
SHA512
6cc0549098e2407263b1eb1d2725e6df2a30b371453c5a72ab35ebb9dfaba5cf7f73fa29f3925fb613cceaf4f2feaf3e6080c7a0969f15c1876f4d3486959da8
SSDEEP
98304:CbF9SydfsXrC2tbCTRutGtl6gTohV0fPGoC6ds/uRvdaBcFPMk7eWqj:ElsbC2toROGtJwGfPGf6dFec9MRnj
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE