Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4363355d38b8c16d8b195c9f3d74a15dba8fd16088dcda9d6baab2d6cf74fefe.exe
Resource
win7-20240221-en
Target
4363355d38b8c16d8b195c9f3d74a15dba8fd16088dcda9d6baab2d6cf74fefe
Size
349KB
MD5
71902cf0487ded744664dfa274bcdfe7
SHA1
516463a9324c3a8628a5cc023216dc68ee145be1
SHA256
4363355d38b8c16d8b195c9f3d74a15dba8fd16088dcda9d6baab2d6cf74fefe
SHA512
1ee0fe57ceb84691a71c965255dfc886ccc3cba10445754d31b01c4945b5c11411e099d4a65c97dfb40e7bff50ec34a4b0c6410b3413eca96e880e8da683ef24
SSDEEP
6144:hqv0WajNb3hJzVIcizgLfH1BYfhYda7b1sHKN5MKLjLmt:mqb3LC41BYiusHY5MK6t
resource | yara_rule |
---|---|
sample | family_zgrat_v1 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NETCrypt.pdb
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ