Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
aef503af46d22058f1cedec183f9502e0ef2a8cad1c348ac89c219d29960ceea.exe
Resource
win7-20240708-en
Target
aef503af46d22058f1cedec183f9502e0ef2a8cad1c348ac89c219d29960ceea
Size
9.3MB
MD5
f40f79d24c31d23d217746097523c42b
SHA1
118f6982704ed301829b183a6c021306585ddefc
SHA256
aef503af46d22058f1cedec183f9502e0ef2a8cad1c348ac89c219d29960ceea
SHA512
ba98e0dce452290d7ffa6bbc415669a3e4771d1e733857361c4f958a26bf160feab10d87ea733e7d13c37b936c056119b2bba990b6e174fd3027f84041f3cf08
SSDEEP
196608:jnnLOAhOcgpavyFuQF+arKwVyh1hSpkDtnWn2VIKTTU8V83FuG22LAr:jvUppAamwVyh1hSp0dWn2JvVqFuGfLc
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ