Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
a0b5283fcaa4370f1e0cf501c76c85bb.dll
Resource
win7-20240221-en
Target
a0b5283fcaa4370f1e0cf501c76c85bb
Size
240KB
MD5
a0b5283fcaa4370f1e0cf501c76c85bb
SHA1
8ec1343363fd0086fd489a50132b4b66676daed9
SHA256
2121f815d46f459bbc08520f476dfcd518fbf9456e4c2c203f6b27296ccea3b4
SHA512
f136f41d9d0e777098a58ed291b3c05f802b4ffcf30a93026411f7f296485ecc447603666f0fcdef20841b09c167c771b1cfcf25724c2ef0097e730fb227f2d3
SSDEEP
6144:MAvfiNTtQF0GqKdBaC5UB84P0sKVPgXeQ8YtQ5/f5B68/nX:MA3iNBvaWO4/KmWYM/z68f
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE