Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
065077fa74c211adf9563f00e57b5daf9594e72cea15b1c470d41b756c3b87e1.exe
Resource
win7-20221111-ja
Target
220309-zb32eseefk_pw_infected.zip
Size
439KB
MD5
c4f23d5436a0d417a8deffc4b13529f4
SHA1
269987bff414e5545a0df770744ec9e7dd55c3d4
SHA256
86b89932744ea0644cbd0cad8d0c38c111501c6dfa52ab2291ea3d0ed2ecdd6e
SHA512
1b8a56b3e15c0a068a59b8106d8669a36c4bb099e0654599e227c47d26b397a7e57ce14d8766232e9e463db78c0d766ce4c07d4f4534a36e1103f056703fd244
SSDEEP
12288:tsvnHg6ucAKtuAJ27QtcmRinO1Da0YhFmWSNN:tsvAcAKoS27QtZ8O1xTtn
resource | yara_rule |
---|---|
static1/unpack002/065077fa74c211adf9563f00e57b5daf9594e72cea15b1c470d41b756c3b87e1.exe | family_quasar |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ