Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Target
F87ED5926D4B89E4473603FA7A7F9BA73A0480DABF8536A15481371234E1D7AE.zip
Size
6.0MB
MD5
8a30dae2190b63a1a107051ee02f3445
SHA1
91f1a9b06e36bf82a081f3acaf895cc202175d87
SHA256
f9e55b462180a3b3723631de80adae899a8e04d1a5e2e3b8a8f6f9c00cc34ff2
SHA512
0c02d52121ab01aa931dfb3c6a6766c669a17e1173012cc48e1464b34b913030482984169172f7bdd37f4e64b6404ee8351617b0dbce5956456aed609fa756aa
SSDEEP
98304:StiW1NuAwyH8rb0Z2zL/N/ddBAAC7cBe0rK1gzriA1f5tdY26jy7Lswxwm:StiuNDwoCb0UX/N1nB6gXiAbJ6jy7L2m
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
Processes:
resource | yara_rule |
---|---|
static1/unpack001/F87ED5926D4B89E4473603FA7A7F9BA73A0480DABF8536A15481371234E1D7AE | agile_net |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\elt\_MainDrive\__RevZone\RevZoneManage\Desktop\RevZoneManage2024\RevZoneServerAdministration\obj\Release\SWM.AdministrationOptions.pdb
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ