Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f0af662af204e22f30f37d331e99c679.exe
Resource
win7-20231215-en
Target
f0af662af204e22f30f37d331e99c679
Size
3.5MB
MD5
f0af662af204e22f30f37d331e99c679
SHA1
bd6e8a1e900ff901f163671624ec66783feff9af
SHA256
6d7b6e16a4940ad5a07c608e025857e607b953143f2d0b8b4e4eabeebddca612
SHA512
ea3c05825f82806d1a33f6809e43eb121adef5b2f7394ecb9baf73e44502af1d48cfce9dcccc33facadcef40fd0c46a3bfda11fc57a7d8f62146ba53a5dfe64e
SSDEEP
49152:D6HWavIVajZH9hsCfl794FVdgMFCd0jTCqeGH1sQct5Ld8zW11WtiPvCv8pX:D62avIamC99Cd+Q2GH1Mx11cFkpX
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ