Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
18470187625e22ebd58a70b05907c5c7.dll
Resource
win7-20231215-en
Target
18470187625e22ebd58a70b05907c5c7
Size
198KB
MD5
18470187625e22ebd58a70b05907c5c7
SHA1
153ebf5654bc3ec2901895efe45c69367df568a2
SHA256
54f2963796210f71592139788b3de24cd51870a104e9834863da157540d897f5
SHA512
8cd74ed5e455636b1a4775c34ce5e1a9f5e8c13b6e6b5d847f1479c8a711adf610fb23b20157843e6b94e9a2fa4c3d1f65917825cc7f4e61c2713a33cd34bd66
SSDEEP
3072:Zotosgy9aL1C4v/Qmf4yCH88ulz/EqdmlnWSWzD4CWTJkDlH9fpHg:ZGgyMV/NJhlz/EsmM4mltC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE