Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
74b31a35ac8b66192f0452f47d5c73f455ed2b8ba06d1eb9179cefaff8a98bf6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74b31a35ac8b66192f0452f47d5c73f455ed2b8ba06d1eb9179cefaff8a98bf6.exe
Resource
win10v2004-20221111-en
Target
74b31a35ac8b66192f0452f47d5c73f455ed2b8ba06d1eb9179cefaff8a98bf6
Size
864KB
MD5
86536aae7f4423d73e30f123e5f4aeca
SHA1
452e9b9cad57afa7770045d87f48de20bd024606
SHA256
74b31a35ac8b66192f0452f47d5c73f455ed2b8ba06d1eb9179cefaff8a98bf6
SHA512
fbb7efd4d8539acd665236522a7fef7934db937be89a62e1df519b7da6ad9738d62230e278ff1d43efe59371ffaea0424109bfc55fee051f5e8bb5d6f647656e
SSDEEP
24576:UFxc7PSIxAhDPpCpRuwWLifTn3UEOrlZj9:Ub+AhbkrfWLOTn3hOrLJ
Processes:
resource | yara_rule |
---|---|
sample | modiloader_stage2 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE