Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230831-en
Target
tmp
Size
1.2MB
MD5
ae9749853a04331f969b00ba6ad6ebe9
SHA1
0d089e27bffdc5643209c923b52eca971df52ed7
SHA256
446e99ad1bf56db96b5fd7b023a1c86060c0d6c20994938b2a0a768da77b3cc4
SHA512
85d27fe5cf43e29dac5cc6e73e6d55c62362ac099c7693f60bff4879a5fac1d27ce560d6a5e98ba0f06cf5fd16cdfd32407057a228e2bc74a2bf52cfbee0bdc2
SSDEEP
24576:/rBE8evHyAabEzNDaev8Oz9pakhnhVMrjLD2M7sn7rO/oVpLREQ:jBE8gyAab4+3khhVMrvvG7vpLRf
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE