Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
82263945bcffc1ef4ce8990f4cb50562c7a413f6a26c3b7e269dc656dfb2c043.exe
Resource
win7-20220715-en
Target
82263945bcffc1ef4ce8990f4cb50562c7a413f6a26c3b7e269dc656dfb2c043
Size
6.2MB
MD5
d4b37d3b00a7cb34817f96979c5b006a
SHA1
7fe5705c2d6459cfae36515363112c9699cc2e50
SHA256
82263945bcffc1ef4ce8990f4cb50562c7a413f6a26c3b7e269dc656dfb2c043
SHA512
26f55797f13bc90c8ff9f892c918425a820bf273925e73f9188d500658562b67d7eed0c9ea66c7ad7c350c1307153cf8583f1902e126d76892f81a749b5b112e
SSDEEP
98304:rAfdVSKx5gjhC7ZCLTkO6Zfa4oD1nk36nDU7deIUGF0Zcwkz+FGVqUd1uboJS:eSU5ko7qkOGHo1dnDUZ5VqTbo8
Processes:
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE