Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
NEAS.f76499b3c19104b91e003232ea47a820.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.f76499b3c19104b91e003232ea47a820.exe
Resource
win10v2004-20231023-en
Target
NEAS.f76499b3c19104b91e003232ea47a820.exe
Size
317KB
MD5
f76499b3c19104b91e003232ea47a820
SHA1
b75b90bb21df4453ce1ad42092580aba3682c447
SHA256
7714804e8a24093d83a7fb0df80cf1d4f8eac27f39cb6d0b6923908d643f1bb3
SHA512
e1f41f9c3cf69cc9c3773b1755b4221298af0d45816c6e2e663bd0c4bfa07f98768bd785408b868369135ed5d9a0881a6e67111450cc2013949e4907810dcb13
SSDEEP
6144:H+Vufmr/y+dI39TdNAJ2WLiQWKwqKHoa5bUolq8GzfEQ9wyFVDyonsIf:eVkmrfUdNKbL7Koa5Uog9zfB9BFVuon3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ