Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ba79b2887bebb3e525e8f24f413c84a2531852e936a7ab5d5a7f4fdec24a1d7b.exe
Resource
win10v2004-20240226-en
Target
ba79b2887bebb3e525e8f24f413c84a2531852e936a7ab5d5a7f4fdec24a1d7b
Size
260KB
MD5
a9b1534950e681c10a65fd1a7c47c495
SHA1
5922f94b1624731e3eae256851bed0116013221a
SHA256
ba79b2887bebb3e525e8f24f413c84a2531852e936a7ab5d5a7f4fdec24a1d7b
SHA512
fe5c872aa444dbc479bdb39c4d0b1d0d125e1d903c361be65f7f34d39685e18176d1331228492739a315c1c908496d3ddb0420550adfd2cd0e8bea12d0a2d65f
SSDEEP
6144:yqv0dfb33JzIFGMjJ6fu4nA06NlWVu9ge:ab3lIFGemh6SG
resource | yara_rule |
---|---|
sample | family_zgrat_v1 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NETCrypt.pdb
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ