Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
cab86b4fbff51c70b60dd3c5a22ae24eb76c43e47d52ed71e206278783ab19a8.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cab86b4fbff51c70b60dd3c5a22ae24eb76c43e47d52ed71e206278783ab19a8.dll
Resource
win10v2004-20230220-en
Target
cab86b4fbff51c70b60dd3c5a22ae24eb76c43e47d52ed71e206278783ab19a8
Size
225KB
MD5
8aef9ce8259c3d411afc31b8f6fb5c9d
SHA1
e0528af7e00053904ac7d5f5d6d6d3538e3e4234
SHA256
cab86b4fbff51c70b60dd3c5a22ae24eb76c43e47d52ed71e206278783ab19a8
SHA512
b6ec1c63b24268e3104614c44561e060612e648e3e10b83bdadc07b6ab4782f9d91c8f0cc15485105a1a2604fe7e52f7d5794748294c3c4683a2af1c6a6e5d1f
SSDEEP
6144:alOqZJkK4UXJzzK2pGDBmEkCCHQ4XCv3Qjs:vq8q9W2pOhkCF4XCv6s
Processes:
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetBatchTransferState
GetBatchValidState
GetTransferState
GetValidState
SendTransferCmd
UpdateExecuteFlag
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE