Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
SaRACmd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SaRACmd.exe
Resource
win10v2004-20230220-en
Target
SaRACmd.exe
Size
41KB
MD5
e7339ca5fe626efede2fc372535b9be5
SHA1
f40d8fd9078c170d4f2ec19396545a64d24f641c
SHA256
015801567064ec351dc02caba2d7613f8be1f5c79c0b1c68465209b34f8f4ab5
SHA512
511932737e92633512b6154ff9c757e7d04a821428ce42e70cea11f12e3924ee4d0dcc380aa554704fe8ba3b6cff4c8d9737b09a46652b6879d2eb3973beee6a
SSDEEP
768:5YTB2AFz4NwPPvyK7npA9nRuSKLZKt7Ex9z+IEe:CsABPvyAnpA9nRuSKLXjzZEe
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ