Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
091e2f9e98f85a667be7612ababd1627ab4dccd979e0d61e2cd617cae5fed19d.exe
Resource
win7-20220715-en
Target
091e2f9e98f85a667be7612ababd1627ab4dccd979e0d61e2cd617cae5fed19d
Size
5.9MB
MD5
d9491ef83fba3d37ca9ba1bb3c26ef1b
SHA1
163f97449c71fd4f9f5e7a7ed75b34404560525a
SHA256
091e2f9e98f85a667be7612ababd1627ab4dccd979e0d61e2cd617cae5fed19d
SHA512
e09f72328abfea0d7378dac8e0eb05ff95400592d744fb47a8d8a7b58f1705dc15e511cb12dcf6973994c0ddbf5a3bd95ccf619560d1125095ae88180c272748
SSDEEP
98304:x4gKXw7H4bDSiY5cHvRS5DRktIhpAQL1ixVb5yvlET+0PeaygjDf9xTzWWVfFKKb:xyA7YbW56RyDm2LUxyi+YD9xPHxlSOco
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE