Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
4704353d7891b4ce26d4a0cf994be73bddead85ce028ca1228a0ef1110c675a1.exe
Resource
win7-20220718-en
Target
4704353d7891b4ce26d4a0cf994be73bddead85ce028ca1228a0ef1110c675a1
Size
5.9MB
MD5
2c5614f158f75fa9c609b0b3a20adc8c
SHA1
f309060d2bd6a76bceb3233d52973bebe70635e1
SHA256
4704353d7891b4ce26d4a0cf994be73bddead85ce028ca1228a0ef1110c675a1
SHA512
df3c9831ae15f2633cfedf2aa6272a723800a3669ef7c695af710ffd083be5e47232f5fecfcd40a9256ba8e0b112bb90750124fccccaf8580d50c58b45594248
SSDEEP
98304:iuUUfMyH1hIpnkshTiqR+2huKxEAdQ1dcdHaqgYxsUjv+Xs4NRpaiY:PUUfMyVhIpqt2oC3Q1edH1gYGrpzY
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE