Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
f565b3b6d1f329432402b8aa3b4af9557cf2d0d006400ee394f23381e428dc9b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f565b3b6d1f329432402b8aa3b4af9557cf2d0d006400ee394f23381e428dc9b.exe
Resource
win10v2004-20220901-en
Target
f565b3b6d1f329432402b8aa3b4af9557cf2d0d006400ee394f23381e428dc9b
Size
12KB
MD5
59096896c55e0ca1522ae009caea2ec9
SHA1
11edd99f5c5708688443dba6ea0ca96288c39a60
SHA256
f565b3b6d1f329432402b8aa3b4af9557cf2d0d006400ee394f23381e428dc9b
SHA512
c7a0af0c3454c4dd42cdd573c61ad400becc274928d22d3dc232f92c18054a645eae36e76040ce0e6877b14174a17b3b6104beb4c73904b1c2cad1939eef5823
SSDEEP
192:xE5fm/eMkgAMLrjGf2v4Vh1WOlhVE4+iR+py5qHxyAEyncjWOF71Yknlv:a5fm/epg936Ov4BEjiQc54nA71vnlv
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ