Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
ama.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ama.exe
Resource
win10v2004-20231215-en
Target
ama.exe
Size
4.9MB
MD5
85bacd21ce284a3ff3151da33c84d43b
SHA1
cbcad3397fd1034028ebe3cc7c4ef87680e3aae7
SHA256
cb80f3f8dbdf12c6929acd19d547b1c0278e7b71a4e2bcf232a7776cf1c287df
SHA512
2d18c893381c5552c6587c17029a32c8f7b1e5ee180075f65e96734cc33eb0f19dbdb8fa4c13aa2883b30ebf4d92512b3f4703b8b2c61f1754d35960e325cc6b
SSDEEP
49152:1lilFnSFg4qVKrQ0buQfHyGGMRTQ/xy8JL3BrrV8GqMOYVFXOuVhGdqCDdWLLxFo:nifgOCpRew8nzmNuVUDZWyzugj
resource | yara_rule |
---|---|
sample | family_zgrat_v1 |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ