Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
c5d6ff6c2ad0b6d407d2643e3954df09d7c5c5410e973ed6d392c1b2ddf4cf1b.exe
Resource
win7-20221111-en
Target
c5d6ff6c2ad0b6d407d2643e3954df09d7c5c5410e973ed6d392c1b2ddf4cf1b
Size
916KB
MD5
3e1e3cc4f19fc543c61dd54aae3920b7
SHA1
25beb15500fc9a52a6ac38d087c5b16d23a2dff9
SHA256
c5d6ff6c2ad0b6d407d2643e3954df09d7c5c5410e973ed6d392c1b2ddf4cf1b
SHA512
e536ef567ee58d6558156aab9d27c5355350bd10313f2beec1bd9403134a5ed78b5864f165f25c7191ab75673c4d12b9735ab005c3d7107a923eb718c699b14f
SSDEEP
24576:+Jnav4dbkHXlQTlACio/uyy5150XxiRE/KJ:Oav48X+TlAfUoteF/E
Processes:
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ