Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
9f0f2103b2f1063f715636e0886980ca670c3a5b79e789823c50361a6dbeaccc.exe
Resource
win7-20240221-en
Target
9f0f2103b2f1063f715636e0886980ca670c3a5b79e789823c50361a6dbeaccc
Size
4.9MB
MD5
27f8736302cc341a6fee7eef31efa585
SHA1
b08b102ca958aebf825e6d654f0b47811db1f99b
SHA256
9f0f2103b2f1063f715636e0886980ca670c3a5b79e789823c50361a6dbeaccc
SHA512
a890f570eec458e37af17a24f8ec46bab94307b981738eeadaf7ed7cdb3c7d5791e6b840b885ea74bf13e92d53759708e487fa66f57a1b67a6b180638382fbdd
SSDEEP
49152:iluVyXRQ+7N19++t1QAIl4ljUNyjusCgRIkoT8bhVSDZjM+BdIDZCalm:EuVyXZV+c19Il2ayVzIp4brSD6MAvm
resource | yara_rule |
---|---|
sample | family_zgrat_v1 |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ