Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
8e4f483813f36549b509bc6fac6037ba6592f0186efee0024a05bae4cd5e8c7f.exe
Resource
win7-20220718-en
Target
8e4f483813f36549b509bc6fac6037ba6592f0186efee0024a05bae4cd5e8c7f
Size
5.9MB
MD5
5d94ec2c9e1a5a48cbc4d82f5961129f
SHA1
71b9fea881448d0c307a484d5c6e9331962903bd
SHA256
8e4f483813f36549b509bc6fac6037ba6592f0186efee0024a05bae4cd5e8c7f
SHA512
a8df474ab58358a805713c771093807c0c03319bb7d3607aba323c7f705c881e3294229f2c6d8c7f5d49f9c163287f72f057083a6071e9a6f7f011ac1eec6147
SSDEEP
98304:ycdxnIUD7x8825KhowXKlfOx/RkFPXr4d8Zfv+vsVgeizBkQGRnOjIrnyV:FvIUVG6EfOxwE8ZOsGlBkQHAyV
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE