Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
f00e2fddaa320e0a37f6b817cea9189bce85acd96c4c20dbd11c2c795ef8011f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f00e2fddaa320e0a37f6b817cea9189bce85acd96c4c20dbd11c2c795ef8011f.exe
Resource
win10v2004-20240802-en
Target
f00e2fddaa320e0a37f6b817cea9189bce85acd96c4c20dbd11c2c795ef8011f
Size
683KB
MD5
e22ee7151c2cebbeb5f0b48097ab49bd
SHA1
5a3ea5db572b965729d7ea62576369b314bd4e98
SHA256
f00e2fddaa320e0a37f6b817cea9189bce85acd96c4c20dbd11c2c795ef8011f
SHA512
32e2f1d4d0b601e328d461c5f28df2a273b7988af8aff484fe93c4381fd91cf44fb984f2737de10b610ff431371d1e814d79aacf52077f0fdc74a067c305e04a
SSDEEP
12288:tsWdVgX1MwKcjZ+fEEIjEOyk/AXqUhKfa4fQfcW39o+esvT+:Nzg6wKcV+sECkXuD4HVesvT
resource | yara_rule |
---|---|
sample | modiloader_stage2 |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ