Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
2bda5e943ddc9e27fdee26877567869cbb25e6babadcf181f7419f7e14b89e60.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2bda5e943ddc9e27fdee26877567869cbb25e6babadcf181f7419f7e14b89e60.exe
Resource
win10v2004-20240226-en
Target
2bda5e943ddc9e27fdee26877567869cbb25e6babadcf181f7419f7e14b89e60
Size
1.0MB
MD5
6cf3d1e1bfae10f035ab2f149abf4ee3
SHA1
8600b9f7945cd486c7fb9c4840973e0ee62eb71f
SHA256
2bda5e943ddc9e27fdee26877567869cbb25e6babadcf181f7419f7e14b89e60
SHA512
edfbdeabb88fea8c2ce1f366f3785172ad916f66935ffc3c5029d0999ccbadd276cd445a5975c3295419a7d34c9fb09fdb3086e796008a20344dbf914fe9b389
SSDEEP
12288:SNZGyaAmYrFHmXVCu/BnA3ddRw+ERnSYeCRqlZVpiiiiiOvp:SN0DiZ0knO+snS5CclZ7iiiiiM
resource | yara_rule |
---|---|
sample | modiloader_stage1 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ