Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
Authenticator_release_x86_64_2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Authenticator_release_x86_64_2.exe
Resource
win10v2004-20240419-en
Target
Authenticator_release_x86_64_2.exe
Size
17.2MB
MD5
26674a4865f364f2e3b7155da5fb4817
SHA1
2a9e1278e560dea0ac691c59b1ca90f29bf4d519
SHA256
baf55c8fc4986b0cd6c270b6c5b7851dbc583b216de752d3cc9d9725c36006e0
SHA512
083ad97e0b9964d26b2c3bbfbb08c2cf27c3b53bd93f67da4308f9921dc07ea0e208e4a194c1609ccab80d4d37444cf0490f59af10616df21c044c345449c2d3
SSDEEP
196608:KePBccl0sKYu/PaQtsI9iL4FMIZETSkjPePdrQJM93BMJg6x9iGvPoMut/X6e0yL:lBccLQtsTQETSkvJQCJGG4MUXx8AKOR/
resource | yara_rule |
---|---|
sample | pyinstaller |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
DestroyIcon
ord380
IsProcessorFeaturePresent
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OpenProcessToken
SelectObject
���ʡz�MU��q��b�l"���������mhx!�,�3*���7@��"�Ò�f�2��Ya�#�yW�~O��D 5L,8`��w�)�U�Ā�/�� jK�C\N&͂�s!~�M}Q��?Ywі}��|�:~l�C/+rTbz�'c��u]�V>��������T������q�%؇�������9M�f"�~Tx3�yFgK�c�ж��^�|��]���d �Z���s&���^��.��ë�¯�缸���I�6��(գ`v)z����{���Ж �$��X�_�%1�5R�$�߽�H����`P�����\�E5��b��.��a�X�̼�����xj��}A��C�$�iC�eΧ���ϫx�!ȏ�>�nB ��>2t��L��p��D̚`�ʓA쒜!���<�}0oeiH����������Ƃ��q�aT�䄪�E�6�����ƻ_E���~���0��fl7�yt]�~�eA�����:4��Y�8���6Ѧ3�{���qt�8�= Y�h`��.�_���I\jY������+��YGt�9f�.��Ќ��ɹ�� ��'S='S"���0 �h_|D��p[F�6�s��,��� ��f)��&�q�2<��iR��䏁�x�;F�ֹ��S�Q����� Λ��o�������-G20e�I��+�I���ˠhMX�-��h��mm��KS��B��h.A�%�Xdؙ�-W��YNP����!���4����yFotK�!PL�8�Iх:(C�C���O7��������m�u��Y ��U��A۬�{:=lYga~ �`ڪ�-��u1n�:�t��[$�|��z�7[��Ni���m� ����Y�8,�n�| <�?�0�!z.�IJ���}`��GL��1����H��ʎ����L�m���8И��)��>��S�Y��j�.��65�}w�o��W:�4�[ ����5uij����M\� �z0�-�j�+��n���r�Ѷ�ԟ}��M�s�A�[�����Q+#�[m~�d�j��� �-����֜0S욒�o4��c]��Nb�tC�ޚ}�@� lY6/[�M��Zy�K���q�_��gcz��l��mŦ�d�]���;Y�m��'�T��j�j�Ϣ�Ua,�cϢ��e�K)��3����%*(�\�H�i�瞪�Y��G�c#���9L�L���V@� c9��l1H<�G0Ɗ��Iʭ(X2<+A�U�/���V˵��I��ʲ^4>�����xX���אxO�H������8�"Uo+�8�ӈn�*�[�����ƒ]ӓ��n4�,$�'���m�t5C������W��54�(���j�]=B��+�_��d}(�������^�R�3/]��H`��đD�G+ �,�$_���*�iZA��xR��Di�|N�}�̎cT���z9���v�3�q�[e�!]���O�7����� �J��ދ���IGcgs��ji�;���յ�0d�ԞL��u�h�B�K���S��A �4D��������p�z�F*qi�B�eI�ߪ� Sw�DG]j�+(�sml��4Y�˩� ��m�� ���1�H�b�B|g���Z_҄D�#�m�%s Axɒo���>��}�'�W�P��fnt{i/:�7u�� $�Qz<a�4�� G�4�I9a7�%��l�3W���i���5$6UC�n��[ 0�"s��GRw]q����v���ӻP��y�nV`\Y ���13���H�H�Z���P�\ˍ]�)E\W��&E��o\Ԕ�n�.(�#Kh�y���pS��p�1��A<��4��AGW�jr��fc��u�h��ZҀ��P��H�pB2E��l���%ud�����G��^���$�&k�0�3R���ғ�I�9�Be'�V����g��V��j`�ܟ�j�j�]��۞�!_�?@�V>?��J�"��E��}}v<�Q�~���CCE�c#����2{{ �V�dv�a�]ؠ�ݧM����L�T�����?=i8fDg�:��Rq�P�߀�$7� wx/�流�vTMc��ù�^��Tm��>[�S�Y���1�]��c��3'�/a���p��+ʲ��uOV��s�B~��r�����dB| �ӗ����~8#괹�ӡ�8�u�2���Y�m6.$cp��?�Z�-���HLt�S4�%����xC�u�;N̜�N�/��p-��]Ѥ��h�C�''R����x�5 �KB�� ��x��۩%w�Em`[Q����Q�9��r��bK�ɗ��zq&�Wb�k)Zo�m�l-ҟ�Lh`G���;S��W�U���*�n��������r���˪�� i0�������eS��n��5 +�^��Y�[��6�I��� ���?�!���w��i�~0���^��i�B��w�4B�wI��RaǾ�C�3�*��w�=�|z�1������ĩ��z�;B��Ǹ��:1�S[�(-�N��.9��v�ZB)uKۅ�����.��@�Pc#c�@�K����4� 8j�}`+]�R�!��Í�Zتȓ[{���� �G#S��U�XyV��L�[`Êɣ�¡��m]8���<�+��l�QTӂ:L\��>gWљ��jѽ�$���/:�țP |JПK�rc���{�������F���1H$){���2o��%w����vC�2���e�L��aﱳOH���c�o�� �7�R�R�C��+��3,J_��iҰ =#X05�<�7K�XGEh% ��� ��4c�Fi�6�O�i���P֮*߷)�"!��I}vڨ�����h�k#��.0i�g�̧ʚ�Xs*�h���,���¼ "�N=e���9�9V��֕Ҩ��K���w�� �]�.��[6L���`�Ȗ�m��+g��㌡�}q�ؑ���� ��d�EI���$�b���|���E��h9�ӃEq�K���n��<�r��.{>�At���td�ο�H+*]����p�����֊G���ۉ�y`I�'�A�-}�7�B{�3`_=�(�tx�a�����V�w��gV��s��[`��{2�i��A=T8�C(A��^״�;��B���e'J;ﱿH"�Phh{o
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ