Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
NEAS.9078cdef5aa55562d8ba2625e9abba00_JC.exe
Resource
win7-20231020-en
Target
NEAS.9078cdef5aa55562d8ba2625e9abba00_JC.exe
Size
19KB
MD5
9078cdef5aa55562d8ba2625e9abba00
SHA1
e875c6a4614431e8d484328718627f75e0168dfc
SHA256
b9641a944f59cd20208b00e97e124ab35263ca8c54350d6a1f47954533f773c4
SHA512
f5b3fb0d47d7238b64fddaf11c7207b1aeeebe2ac8f35bfee3a003393fba559dd707f83ab5eafbb4717daa34098d29a366461fef7bd2b5ac7d31940201566737
SSDEEP
384:zw+1WA2Ni64rXGfZvTx1uHFGi4i/8E9VFf:zw+gU64r8QzeE
resource | yara_rule |
---|---|
sample | healer |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ