Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
29b72ab3ea289d22298028d3299b6f25.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29b72ab3ea289d22298028d3299b6f25.exe
Resource
win10v2004-20231215-en
Target
29b72ab3ea289d22298028d3299b6f25
Size
242KB
MD5
29b72ab3ea289d22298028d3299b6f25
SHA1
1cd108a521e31bda1b79a866aba93bb3edb0a45d
SHA256
54febfb1d8f49a432d5393987dff14da235095faa1c9beda56bfcfd752d69b3e
SHA512
f397a39f0ed93211a6086c038f36f407abc2de61bc74bd7bbffc6e6a6cc3d32d1e3dcccbd298469b75e954a0d066b12d775a089e391e6ba324ff3b12eac0a8d8
SSDEEP
6144:wkeENDvTSn2SV/GuhYdViC7X57+nMnxttbeZG8fV+V5Xb:wNEND/k/GLPX57+nUwfV+/b
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ