Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
142.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
142.exe
Resource
win10v2004-20240419-en
Target
142.exe
Size
260KB
MD5
4998ab8ddf0fb46a4c208e467d8c93d6
SHA1
dacdde1fe3031df8bdf51437f64156ea14834479
SHA256
3536c0d20896aad0befd60d07c594535f44e05fc480d5d4f3555cc492c4aa41d
SHA512
5a143f18050a5a77921376c8633badf1c4fb05ff5335f4490ee58be34f2b453fd2761f23ead3f0d0510d43251c962d4d8eceba6772db5c25c502618f3633f14e
SSDEEP
3072:5I0qv0cb3j43JB3Z1441sMEY7bDhBlxVRAkz2WkvO9ud4u8g3wPUjZRHhG6nv5/u:Rqv0cb38Jz2MflxVRjjmZjTBZk
resource | yara_rule |
---|---|
sample | family_zgrat_v1 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NETCrypt.pdb
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ