Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
TyrlNickh236589.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
TyrlNickh236589.exe
Resource
win10v2004-20220812-en
Target
TyrlNickh236589.exe
Size
1.2MB
MD5
4b203393dca20f9ca49ca5135e3e9e02
SHA1
d1119d145bdfc3b9cfc91428fdeb422a47a9416f
SHA256
023df126fecee107faa5fadfc466544ebbfafafe44623448a585ac7997df66dd
SHA512
76314d8374653e70b25153a78c8bf05ed9f69d876852d02bb8993242de7046493c93a713beefd7171c36ec53fb0183f764febc3ed27eb1ff5c6cc712ceb28cee
SSDEEP
12288:UktRu7xpLqH5CdhdbmEqqPs8ZdU5ihKhXtMkMgBARLkNSWIYuGjP2KI0Y6OPQC+k:5ULqqhD90qU5dCkziRANR2Hx4C+4GK
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Hangil IT Co.\, Ltd,O=Hangil IT Co.\, Ltd,ST=Seoul,C=KR
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ