Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
9f0f2103b2f1063f715636e0886980ca670c3a5b79e789823c50361a6dbeaccc.exe
Resource
win7-20240221-en
Target
27f8736302cc341a6fee7eef31efa585.bin
Size
3.0MB
MD5
c5673962d967b2198846059b79b25020
SHA1
a39bd61e987a49345d731f3c1fff0236be9327f7
SHA256
048e9c0b9159c337c8665ad6bbe95b26751a964290201c56f27697214cb3d2f6
SHA512
ade520698fa67980e6fd742c541b5b4ac0b0377c477cafcf2433b3caa3d70bdff9f515e375d3bf02b3f34154da216118e851519e51c568b73abd5b3b66f46a63
SSDEEP
98304:B8TKFOFqcmvMFjqIdZJEyA5P8SRWifWXQOAl:CTpFyMDBG10Qp
resource | yara_rule |
---|---|
static1/unpack001/9f0f2103b2f1063f715636e0886980ca670c3a5b79e789823c50361a6dbeaccc.exe | family_zgrat_v1 |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ