Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
dmr72.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dmr72.exe
Resource
win10v2004-20240802-en
Target
dmr72.exe
Size
504KB
MD5
9b6c9b2660e2819352b9e9afa900eb68
SHA1
a901074f923efa09a7e4413d55ef30c8fcbd0322
SHA256
e7b27eb0b4e5ccfb97d68a125cb401b05939b8fd8010c57f72b04e9e841b6b5a
SHA512
0eeff30dffd76732ef64cb450dd594628bfd2bd5439700f444317ccef001c145b02bc12aa16c8df41d5b64934ca2f642148bff17967b5b6a82fcd8fbae534599
SSDEEP
12288:PCjhHm4zAJlv9FJ+o0zOFJ2+l9AlstfWETi+:6l0llFJ+o0zQJ9TtDi+
resource | yara_rule |
---|---|
sample | revengerat |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ