Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
23b23403ff4dc7d84c970f81058cd525df3864c9e19510de2dde85ec1e33cb21.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
23b23403ff4dc7d84c970f81058cd525df3864c9e19510de2dde85ec1e33cb21.exe
Resource
win10v2004-20220812-en
Target
23b23403ff4dc7d84c970f81058cd525df3864c9e19510de2dde85ec1e33cb21
Size
1.9MB
MD5
5ecbadcc4176914fba2092627cb72ebb
SHA1
9240b3d617af09b92200adf7f8ce0ceec6451d52
SHA256
23b23403ff4dc7d84c970f81058cd525df3864c9e19510de2dde85ec1e33cb21
SHA512
db1d3eb663f7b4e6dcd2364e19374c476a409f1d93340a4037c99b75f0f0a5afe1f25b6c2324b53363f09a890a37b76bcc998fa4923a5ea9830128f19c59ef66
SSDEEP
49152:BhloJfeL5N/1q8CAxj55d2VvBwpp//6+lXZBIYQ:BhlzL38kj7aBkp//6+psD
Processes:
resource | yara_rule |
---|---|
sample | upx |
AutoIT scripts compiled to PE executables.
Processes:
resource | yara_rule |
---|---|
static1/unpack001/out.upx | autoit_exe |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ