Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
NEAS.1d95c48763b85a991ada671c67b05120.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.1d95c48763b85a991ada671c67b05120.exe
Resource
win10v2004-20231023-en
Target
NEAS.1d95c48763b85a991ada671c67b05120.exe
Size
222KB
MD5
1d95c48763b85a991ada671c67b05120
SHA1
9da2f5c466ee9a5631018133ef80c87d81f0bbec
SHA256
5e615025bed07f4bea345e6ec2022abe8ebd1fb060c3df258ac550f8edac8c7a
SHA512
791b91f2c2c3d77255ee1e981cb78318798eb79f9102b947288fcb2718616b27600c7d24a1971e5b8ec726d01de5ffffe8fc0adedf183c7bd42fc99c31aac434
SSDEEP
6144:iAoSw2QWxAb+615/g0R7IpBZH0FxgUQMlv2nQchuN3zD:iKaPzg0R7SDUUMVmQMuN3zD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ