Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
ff0e05283f9e0fe7e5b48b2c8756e2f6fdf5ebd19474bf5bf03407756f028d38.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff0e05283f9e0fe7e5b48b2c8756e2f6fdf5ebd19474bf5bf03407756f028d38.dll
Resource
win10v2004-20220812-en
Target
ff0e05283f9e0fe7e5b48b2c8756e2f6fdf5ebd19474bf5bf03407756f028d38
Size
28KB
MD5
40a2d190c6c03494552417c950f4fbeb
SHA1
2684ca84658b5b42862494bd29028fe7338221a6
SHA256
ff0e05283f9e0fe7e5b48b2c8756e2f6fdf5ebd19474bf5bf03407756f028d38
SHA512
353bc900eec3248fef978c8f132519396231c066f14e7ec63755a94f87267915901b22b96e672677fec4abab938d382b9fa81a77c375dc428326897486b3533c
SSDEEP
768:Fo8pyQcTVXu4c3QiWmc1eu1dAU/yAGksrsG040m4LibS3:K7f44XiW4uAsQgp4KWS3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ