Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
aa2cef16edce221b2557caf8b7ad14bfb8c8111860076f8b683ba192f254bfcf.exe
Resource
win7-20231215-en
Target
aa2cef16edce221b2557caf8b7ad14bfb8c8111860076f8b683ba192f254bfcf
Size
6.2MB
MD5
d2ef2ab48311dd0b50594e1bbb23c9f4
SHA1
e9b1b813ba2ba88e0f096715d007c9923a60d505
SHA256
aa2cef16edce221b2557caf8b7ad14bfb8c8111860076f8b683ba192f254bfcf
SHA512
6bb5572064cbcb9406b4b3f6bbd114758cc353390be8ee775116c1772c02b03b55b19cb43272d0381e3fddb12216b79d57b94de9c1771ba3ea5bc19e5d636a75
SSDEEP
98304:csKi3FnkpD/k1aOSdQUZN9QBvBesfrdOS/OPDcMqWql4Q:r73FnkpD84eUZ3QxB3dOFPDOl4Q
resource | yara_rule |
---|---|
sample | family_zgrat_v1 |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ