Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
e48c913aa6971092031aeda3cec6dc635273b48e1f9a5b1818b15ffac2f1e680.exe
Resource
win7-20220715-en
Target
e48c913aa6971092031aeda3cec6dc635273b48e1f9a5b1818b15ffac2f1e680
Size
5.9MB
MD5
d1e5ed550a5d9744cd6a65f9d2e80fae
SHA1
7142e6ac91f798b066686902afb19506d39d00a6
SHA256
e48c913aa6971092031aeda3cec6dc635273b48e1f9a5b1818b15ffac2f1e680
SHA512
777d87f7c4016a023b3a34e37803b2b5f79ff4d63d316695e745a7349209354414eb5a1d0db1d50d89cc968930c5e92f5063b3f77c75bf35ea1318cd99805949
SSDEEP
98304:B79PYZBUHxxN+hNnThraC1bC0ULLz5I8BS1fOB52++XgVD3kYqCAGmAo0:thIBUHPchtRV0v5uX3gVDUYyYo0
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE