Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
1wg01rY8.exe
Resource
win7-20230831-en
Target
1wg01rY8.exe
Size
19KB
MD5
6ed09bc061bef57530a88624374180f4
SHA1
7f082c94137ebd6527d84555959802195a089946
SHA256
760eb9960bfab97f6bce865828a0d7c37dfe638ff06e6b12776897f9c1e62995
SHA512
875bfd71766fcce6846a864268f18449b0ab163024b0befb6d7a2cf3424fbe0d84b07af6da3240b0a08cc4911fafad062064ba2459eb190517e3b3b7c9205ccf
SSDEEP
384:zw+1WA2Ni64rXGfZvTx1uHFGi4i/8E9VFf:zw+gU64r8QzeE
resource | yara_rule |
---|---|
sample | healer |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ