Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20230221-en
Target
Setup.exe
Size
5.0MB
MD5
36ec5db7a7da85a85416870098529108
SHA1
5f2052d19badb1a953fb53aae197d7126106beb6
SHA256
b86b793d720b43d3fb1525f98758256d1ccf4ed543dc1bd01b54921f7143fb46
SHA512
00e544be80e53281a6e66c473a8d8c436003fe76f1b464515ba5f50b523c40acc302ba3d348d1cbbd2970611127fd336e84de9a3f55ab85e46ceb512ed5c7b9b
SSDEEP
49152:SZWMqic3obV0//WmD1ufCiORefaMG2wyFK7O3c194MXxdhtF4My9KMlenxepLMz:JMNRb6HdjSZZFKy7MhPOg
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE