Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
5f10c89b567266353b1f029e33601040_console.exe
Resource
win7-20230831-en
Target
5f10c89b567266353b1f029e33601040_console.exe
Size
5.5MB
MD5
5f10c89b567266353b1f029e33601040
SHA1
2a1bc7580417f57b9c108b0800015601d4acd0d7
SHA256
b0a71007609fffcaf67d434679a655c2356ac41df82998e5e6b1ceb911491c9f
SHA512
cb0778602d018986bb65d67a51482e5f5f2f9f319ec38adaa9d3e8798f7a302f05e94911030a755434c9d293845df4cb35a8550cd241372a9d0c2ef6f71b8969
SSDEEP
98304:1hXKjXYjZiqmQ0ZlHJqtfRdYA0HHchad/QhM:bKj/cYA0H8Ed/+M
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_NotificationNode@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE