Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
0379a47f3a5ab5ce21b26e6a92354dfe.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0379a47f3a5ab5ce21b26e6a92354dfe.dll
Resource
win10v2004-20231215-en
Target
0379a47f3a5ab5ce21b26e6a92354dfe
Size
696KB
MD5
0379a47f3a5ab5ce21b26e6a92354dfe
SHA1
31ead2eb93dbd9b68532b78c0f94470193269308
SHA256
8ad1a956a01d074ddb3dfc06eab4a28478068cd0350ccb5284f4a5c93809f297
SHA512
9673583d4da4fb21f2f60a4d337340bdf089ca789c81ec4efeb0d73d97ecea9b59eae74d43f37428f2fd484cd4eacae958e7432cf02e8716facd22f972618e70
SSDEEP
12288:qrvn3bawf4Ez+0mcwHF5nEV3STxURn0q1Lh+/HU/btR/n//1LjpSOVcBrCHmD:qLn3bj37mcwl1YiTx6n79qHEZRHJjpS9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunSohuNewsDirectly
StartPopupServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ