Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
5fd45dad8abbc7589e2bd19543b69531f5c7cf8959968386bd953231672c32d5.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5fd45dad8abbc7589e2bd19543b69531f5c7cf8959968386bd953231672c32d5.dll
Resource
win10v2004-20230220-en
Target
5fd45dad8abbc7589e2bd19543b69531f5c7cf8959968386bd953231672c32d5
Size
149KB
MD5
6b56ccb64946e9de7fcb1c056ff2f9fb
SHA1
35606b9e56aeb1f28f1c9959031ff60c097442ce
SHA256
5fd45dad8abbc7589e2bd19543b69531f5c7cf8959968386bd953231672c32d5
SHA512
c73545c2fcb1dc05f5294943356ed7d2844405dd20c7d4088651e8e6e925f181cee3e61a39c657024da06592f93f58fd757ba8d5698e2eff851be35d95f53e43
SSDEEP
3072:SohrbMz/a9kj5O9GgbPikuBj1YRq1xLf/5nLkM9eSF7MqkSsKmdSN6:1bMz/a9k1O9XPk1YRGf/5nLF9eSHsKmz
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
InitFIXSimulaterTask
RunFIXSimulaterTask
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE