Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
Аdоbе Рrеmiеrе Рrо 2024.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Аdоbе Рrеmiеrе Рrо 2024.exe
Resource
win10v2004-20240426-en
Target
Аdоbе Рrеmiеrе Рrо 2024.exe
Size
105.0MB
MD5
9b18532674a9282289f8be8357460eb4
SHA1
3ab80df6fd12ee818b0efa62547a255689b56b89
SHA256
37e5d18fe89aa21253fc6b82f73ca1938b4f86f63a4c6686ff85471d6d88a082
SHA512
f0c99375a23c72573d8d74fa8acfc27b2dc690579fac4ee919c72a14e043bb0b7ab9295c937d36064c7a80a69c1a64d7af13dc750cf70af4fdba4ca60f527c0d
SSDEEP
1572864:gDJaiqXk6kYbEzJI7TWYiLWuPX9prFxCr8wkhXGeC37spBnwjWfm2Tivq:Ab9YbEVQqLWuPXD+r/khXGezBnaW+vq
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource | yara_rule |
---|---|
sample | agile_net |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
C:\Users\Admin\Desktop\projects\NewProjects\Ad??b????r??mi??r????r??S??tu??Client1\WindowsFormsApp1\bin\Debug\Secured\??d??b?? ??r??mi??r?? ??r?? 2024.pdb
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ