Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
test2.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
test2.exe
Resource
win10v2004-20240426-en
Target
test2
Size
312KB
MD5
86d3ab40b8ef928debf74c175f4f8c59
SHA1
1c131b65fb829b691b88cacd4ac071b5cfd11a26
SHA256
0d5a41ba3c0c0348e01eadb865c67021f1451f7013a8a695a03336b672ce02a5
SHA512
d4d193eb7d98a41b4cd6ce335faba38c69581895d4cbc5f06616459b7a445e90ebab5e6b5d80b92ffccedef828923dfa5e19e0c653862d75caae65cd65c0a89f
SSDEEP
3072:9y7ndTd5OnHkUqM3VPFK1jl6QQw7uI4otFC8Bsj:9yxTdYrhbXA6onA
Processes:
resource | yara_rule |
---|---|
sample | family_purelog_stealer |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ