Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
b156409f4fce371d73516dd46ea70166869f96ae8422d51389376cea77f51643.exe
Resource
win7-20220715-en
Target
b156409f4fce371d73516dd46ea70166869f96ae8422d51389376cea77f51643
Size
5.9MB
MD5
aabd2598e548ceabe8182ced634dfef3
SHA1
ae6843378d520c58e42742caf28728d3c516755f
SHA256
b156409f4fce371d73516dd46ea70166869f96ae8422d51389376cea77f51643
SHA512
40455b3f63b4d0b0a939d023a8a6112b2371f7084dab741ca969faf6f5cb64aa49af306ef36aacc0ccb9964b1d51515441acbdfe6177e9958afd1e8b8b9f38f4
SSDEEP
98304:nXi0OC7TPyRvPYR2VESy/ASe9PZsv+Yk6Mul8RHsBMuzwMLQo:nXrOC7TPyRH1ySy/ASQggMLH
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE