Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
406c952c3a396e9938513df6148a947e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
406c952c3a396e9938513df6148a947e.exe
Resource
win10v2004-20231215-en
Target
406c952c3a396e9938513df6148a947e
Size
294KB
MD5
406c952c3a396e9938513df6148a947e
SHA1
7d5f0fc24ac943f1767c6ff7e1d012bad7a066e5
SHA256
7506180ae5b69d94e2052de87babde89143972c37cc6de5de709143997dbd932
SHA512
7735d71624bcb5661553b0241ec74140fe3cf34cf40e573c625b7f50a56d1c9cc7143e943c050048dc336406e34043618de7ce7e586c10f76e682ed1c27bcc62
SSDEEP
6144:SB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotvd:SaD4ZieSgp/FeH75J7CceoSopd
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE