Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
84278db848e3377e641750f6fa4f6203a6b2e5cbcdb680028fb3a98a13945ff4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
84278db848e3377e641750f6fa4f6203a6b2e5cbcdb680028fb3a98a13945ff4.exe
Resource
win10v2004-20220812-en
Target
84278db848e3377e641750f6fa4f6203a6b2e5cbcdb680028fb3a98a13945ff4
Size
13KB
MD5
17534ad15ed6da613a92da0842ee4686
SHA1
79ed14259d73e4c5c7e5bfd6596affe715d47332
SHA256
84278db848e3377e641750f6fa4f6203a6b2e5cbcdb680028fb3a98a13945ff4
SHA512
7c1a91d1eb262739562f6d6d0e7f8af911b4bec34713f470231fe94a40c29c6a5e103296f6630cc6527f72f017c79f66f6b82ade08bb6dc94a44520fd0b3eebb
SSDEEP
192:MwxKKl2oz6m6vQGOgM+yRWMCrSAHGMfYHxyAEyncjWOI6n/CWvYIf:Mi76oLlRWM2SIRmnZ6/CWvVf
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ