Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
1397d7b884245d7bf1d55bbdf81f8441.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1397d7b884245d7bf1d55bbdf81f8441.exe
Resource
win10v2004-20231215-en
Target
1397d7b884245d7bf1d55bbdf81f8441
Size
88KB
MD5
1397d7b884245d7bf1d55bbdf81f8441
SHA1
6d85fcbca7e6262798dbe5dd7bcd4648622ddb68
SHA256
eb05b228220de424ce8f3543b77f2884b974816300aee76f07f041317c57a8e2
SHA512
9f29cc2abe2f622ee68c35f4214013cd8e60316697b9c8f982eda0be42368b75ffe415d1a735b717c14c703042b95b4c767e73ea930ea3da3cdb98e6056bd88f
SSDEEP
1536:J0ZkV23sTWotKch9KERxbTbKALCQnM6mP5C85yt92ZwzHOgH4mQVdI:JWaTtrh9KEHPmQn65C85ezjYbdI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ