Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
NEAS.02590dcdffa289e1f395cd14aebb81e0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.02590dcdffa289e1f395cd14aebb81e0.exe
Resource
win10v2004-20231023-en
Target
NEAS.02590dcdffa289e1f395cd14aebb81e0.exe
Size
2.3MB
MD5
02590dcdffa289e1f395cd14aebb81e0
SHA1
b0c4f26571f1b50397765ffe6d1248dbe58da2cf
SHA256
24118857fb07bb228b9586ae71e8eddeee6623ac9d2c139028b3d00a014ab38f
SHA512
b33cd0b2da2bb0b3e3ee77fbb685c2060324de8f055092662535b8c4508256891ccff9eece1d2ef35bfa8c04c3265cb093636093c1a4a1047574a39f7b989c2e
SSDEEP
49152:vnoe1EW0tBEdJmnO/xeTq3V/RabdJopwFX+xfqMo96R+w:vnoecBO/ZWq3VAbboQXPMpR+w
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ