Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
aad3072a367a7b47c0ef0472bde70721f5aff5285dbd40310bb19c7b68ff3918.exe
Resource
win7-20220715-en
Target
aad3072a367a7b47c0ef0472bde70721f5aff5285dbd40310bb19c7b68ff3918
Size
5.9MB
MD5
0584dab798512e3053948814accbb6f9
SHA1
082ad7c7d350757e107841aa77402fbef12dd10c
SHA256
aad3072a367a7b47c0ef0472bde70721f5aff5285dbd40310bb19c7b68ff3918
SHA512
23783cb0cd26b1a257bb57ef4cbb5ff48250159eed176823f027c1cda7b8eb66508e5361e1347bfda02b7b6b34e5fe573bdbfc0c7dd3226a8bfb471ce366d9d8
SSDEEP
98304:q1F36xEKjmkfZcEGYNDn9Qofh4IYE393rJibfONsM8SHMER3kX7xN16IUS:qDf+mkSNYZB4qZrUS8WMAkL/1z
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE