Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1ca39609c6944f6a79338c53b7652e59.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ca39609c6944f6a79338c53b7652e59.exe
Resource
win10v2004-20231215-en
Target
1ca39609c6944f6a79338c53b7652e59
Size
237KB
MD5
1ca39609c6944f6a79338c53b7652e59
SHA1
65fabefe56a7a88dee97165e440c89e5541c1a7f
SHA256
bd80dd22ec0147ba50971a28d46bf263fbaee88c29ea55e59170fb933f8f0f0e
SHA512
d45dd8465d24b5a68ba2915bce949243be229be724e5547683ddc71b01f6caa0e16bebc2505bd65da2e44c14a30bfe42ad304913221faa4bb3a9ae7c7548e46d
SSDEEP
3072:elELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsTVI7t4hw0/K8oT:V3kOMeaavF17EP6qyqsTVEtoxoT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ