Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
73da98ea6f303b14d150e647de7ff772daf720315498d1e1e7ef5b9195b6ea79.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
73da98ea6f303b14d150e647de7ff772daf720315498d1e1e7ef5b9195b6ea79.exe
Resource
win10v2004-20230220-en
Target
quipexe.zip
Size
611KB
MD5
c7a55affb261112f20343838f8333ded
SHA1
6078f845f7e0dd5543d66b825c563e7ef1bb9743
SHA256
e98d8f56f528f7f03d65bcdd1736e950307452b5f336b5b0e8601d36b44a37f9
SHA512
8518472f27023b83c4cc09031374098c1cc10052afb2a6078a0d6319a77762fc79df8147c59e157f1bc60350d5364b3a15ba8c999b6541e62fcb584205a5a456
SSDEEP
12288:uY9o3YNubF76/yZNYV4aR4Xgl5wqAcUllj0uUEIBrt77uIvltJN4ZjUe:uYa3YNUzZNYVN+cwl4uUEIv7aIvltJNi
Processes:
resource | yara_rule |
---|---|
static1/unpack001/73da98ea6f303b14d150e647de7ff772daf720315498d1e1e7ef5b9195b6ea79.bin | upx |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=91320804MA1MKN9Q0G,CN=Anhui Shabake Network Technology Co.\, Ltd.,OU=运营,O=Anhui Shabake Network Technology Co.\, Ltd.,L=Ma'anshan,ST=Anhui,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13094d6127616e7368616e,1.3.6.1.4.1.311.60.2.1.2=#1305416e687569,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ