Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
14b900286ac776a901ff3beb49507b83cb7902276d51c011360f837669ba7a66.exe
Resource
win7-20231129-en
Target
14b900286ac776a901ff3beb49507b83cb7902276d51c011360f837669ba7a66
Size
6.2MB
MD5
a69e9fba99f717cb811554e1985f45c2
SHA1
f8057be04f9e0a00a53a6b5fc66e43345592668f
SHA256
14b900286ac776a901ff3beb49507b83cb7902276d51c011360f837669ba7a66
SHA512
9016deaf6dffd6e03339416a0d11437bc64d53495f952268fc4b0b9d0a39d3f8faf0d57c8cf9dd3ac95f5ff52cb4daf38d2b7a26bf278bed90efbfaf410e9103
SSDEEP
98304:Du8DZiccE2uEwXDiPz9G2rYIDujbOW9acwIxcGieIxcGiP:D1mEUuWbQ2VOawgpGNpGI
resource | yara_rule |
---|---|
sample | family_zgrat_v1 |
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
resource | yara_rule |
---|---|
sample | net_reactor |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ