Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
bingdu/爱比较抬棺_TMDprotected from thrretbook.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bingdu/爱比较抬棺_TMDprotected from thrretbook.exe
Resource
win10v2004-20230220-en
Target
bingdu.rar
Size
22.8MB
MD5
bb0f2e7ecdd15e53c93f08df97d46889
SHA1
46ee82d3f613e0fe562d03ea96942b8fae17a8d2
SHA256
9705b92cacffa01e2d883105e9f187ddc1249c27067834fbbb7c3687f3adcd8c
SHA512
fef017511c7953206980bf4b8dcb4ffa855213b35be44fb9e12048cce087d3e73b3a5ba4303fdfd335dc07e45faf25d9e35f89b8e2ef04ffd8b1e6ea1f1112d4
SSDEEP
393216:eF6gL4LYbp9pr5AUBfl+2ZOwFz6G1YZJSadBn8XHmCZDfq+jhSvLxqEiYAR:ekKsYb3pFAgPRwGaSmnhClq+MdqlzR
Processes:
resource | yara_rule |
---|---|
static1/unpack001/bingdu/爱比较抬棺_TMDprotected from thrretbook.exe | themida |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ