Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
d9af261e2d79a7e6a13a86cda68e50f267129695ae2abb5ba92df720ac32a0b7.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d9af261e2d79a7e6a13a86cda68e50f267129695ae2abb5ba92df720ac32a0b7.exe
Resource
win10v2004-20240709-en
Target
d9af261e2d79a7e6a13a86cda68e50f267129695ae2abb5ba92df720ac32a0b7.exe
Size
9.2MB
MD5
e07a8dd6ca20053ba2a90cf52be73e43
SHA1
1a42c89ca50559c1a0668a8a8d31f0ce49620c05
SHA256
d9af261e2d79a7e6a13a86cda68e50f267129695ae2abb5ba92df720ac32a0b7
SHA512
97a8bad9c962a40ea2c9f5dd770962e84e4d9cad0ca95a87e7e202c84ab4773559b5d5ad025594b4a11f68b87ce2898837d26ab700d4ed62e92eea5a535f3b57
SSDEEP
196608:h6UDQWmkC75MSrTfm/E2nTOqyf39XHRRcV:/O7t/TeVnT3G3VHRS
resource | yara_rule |
---|---|
sample | family_hijackloader |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
T:\8v\g\debugging\m\1\HTTPS\yp\zero\mo\proxy\x86\framework\i.pdb
ord141
ord93
ord71
ord8
ord112
IsDebuggerPresent
LocalFree
RemoveDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetProcessWorkingSetSize
GetCurrentProcess
GetSystemDirectoryA
CreateDirectoryA
GetTickCount
DeleteFileA
CloseHandle
GetLastError
CreateMutexA
GetCurrentProcessId
GetModuleFileNameA
GetTempPathA
LocalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
FreeResource
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetProcAddress
GetModuleHandleA
SetStdHandle
GetLocalTime
HeapFree
GetModuleHandleW
Sleep
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetFileType
MultiByteToWideChar
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ