Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
1989c9b8ecb487c23d6de52e5860c4bb9ed9b9ee5b22265267761a686eba7c2f.exe
Resource
win7-20231215-en
Target
1989c9b8ecb487c23d6de52e5860c4bb9ed9b9ee5b22265267761a686eba7c2f
Size
5.6MB
MD5
47e19c527210dfdce1dfa2962eaa73de
SHA1
80741dd2a77d77097f7638e61095017ff9d534ae
SHA256
1989c9b8ecb487c23d6de52e5860c4bb9ed9b9ee5b22265267761a686eba7c2f
SHA512
52fd9f3245fe2e7f56d47d855ccbd91e4931330ca5f8a00181531e59e7a508e7f93d6ea270cbd3fcc6d3ad54e68027960c305d2ef81b28108731aed88b3e461c
SSDEEP
98304:+e3e4ejPxblyoseZRIPpAogYKeTzOzqc7u9:Le4ejJ5ceZEvgnDzx7W
resource | yara_rule |
---|---|
sample | family_zgrat_v1 |
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
resource | yara_rule |
---|---|
sample | net_reactor |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ