Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0cfc207c97b8a7a91aca5b3098b8c508.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cfc207c97b8a7a91aca5b3098b8c508.exe
Resource
win10v2004-20231215-en
Target
0cfc207c97b8a7a91aca5b3098b8c508
Size
202KB
MD5
0cfc207c97b8a7a91aca5b3098b8c508
SHA1
e0d622d7be48608a92a1c539f6d5807ff9c018df
SHA256
e5d42f9c90cb727909a940080c65c97c40032a2e257bc5055e05699d52b2f24a
SHA512
64a95c7e5ba4a9dacec7b6e8e774a1b9699e0664d61f4fa44a514b8afbdbd5a9e700fa942f0c825ee0bcb3f889dd40ee8a0c8e724e5ee7f6afef86e34615af7d
SSDEEP
6144:C0YhjwuTT396HSjGT7UZ5SPzcxt4tGhL5P:4hjfTTHBkc4tKt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ