Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
fc1a3019551235ad7643ea61afb149356a36d0cd03b375b5c9434c3270306e59.exe
Resource
win7-20220718-en
Target
fc1a3019551235ad7643ea61afb149356a36d0cd03b375b5c9434c3270306e59
Size
5.9MB
MD5
943ba6acbdbeb3b0fda85f3f93983bc4
SHA1
eb26323a38c0114175ab44f65c659c528c03f9ef
SHA256
fc1a3019551235ad7643ea61afb149356a36d0cd03b375b5c9434c3270306e59
SHA512
eacd134975762f96c3653d8b2e35ca323eccee930593bb1c89ca395eb720a81a05aba3e9c06c31a500ebcbe661f5fe56c62a08bb4b71ec2623a25e4f0d1a69d2
SSDEEP
98304:aZBrD6wEXWGt0C8F2rlwKFrGBWQgFE5GPeQuSHi++JbTFYCut4OvG/:aP/EvaF2rl5F3X1xNu
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE