Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Banker.Win32.Qbot.pef-60c64cb07036a6dc7c25695c091f1bc78edf53b7057686cb914b1d0706d78be8.exe
Resource
win7-20220812-en
Target
HEUR-Trojan-Banker.Win32.Qbot.pef-60c64cb07036a6dc7c25695c091f1bc78edf53b7057686cb914b1d0706d78be8.exe
Size
339KB
MD5
8effe50f449b259d501e0f84e18c6b83
SHA1
e6fdc55a4535802d1231684579ec00101086d313
SHA256
60c64cb07036a6dc7c25695c091f1bc78edf53b7057686cb914b1d0706d78be8
SHA512
e537c45d94092bb541c5daeda47506bb697f31dcc5eb4a68bd020e784f161c29b5b6719fcf34ff8adb8cee0675569d72958f25326940eccefdccee8bfd00ad60
SSDEEP
6144:gmrao/6vdwjie1qCOYFpXD36g3pPnx5b9XP0+Bha//B:gmrao/6e2eQxopr3pPnt8akB
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleHandleA
CoQueryReleaseObject
SystemFunction041
GdiGetBatchLimit
EnumPrintProcessorsW
GradientFill
GetFileVersionInfoA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE