Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
社保缴费员工.exe
Resource
win7-20220901-en
Target
b4c2bd339393e583c1440caa2b42e51c470c25a94602e9392a4178fc37eddc61
Size
475KB
MD5
bac6366671286565c65aef4e2c670709
SHA1
aeaa4d66b5518e31763765ac72127220715c8d62
SHA256
b4c2bd339393e583c1440caa2b42e51c470c25a94602e9392a4178fc37eddc61
SHA512
cd5e895576047a1c8649935075b3c9dd1669e1590bb18519426e10daa20a34320fdd5856bbea5ca7eb9c39b36d1478e25e90f1c128a36917a13a510f8ebbf49e
SSDEEP
12288:HA/HnuckfnK0EPotc3zPv93Yb3RXeHS+ratLXnWmUImZaZYgGZh:oHMK1DN3m3p9kaxnWaGfvZh
resource | yara_rule |
---|---|
static1/unpack002/社保缴费员工.bat | aspack_v212_v242 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE