Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
2a879bf182b8293f7f1f75a36dacad15.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a879bf182b8293f7f1f75a36dacad15.exe
Resource
win10v2004-20231215-en
Target
2a879bf182b8293f7f1f75a36dacad15
Size
241KB
MD5
2a879bf182b8293f7f1f75a36dacad15
SHA1
21f421190ffc2791705bc9441ae0b4452a30bb04
SHA256
63910757c2f66dfcf22cc301d545dd3a4aaba96dd3c392b9f46982fa7048cf56
SHA512
95ce5af4fc162e6164d1ccda9e5a92260d4a7dcf31563674ccc5b1f8d8cfbf68ca71eceb80a6067cd46c1f44392ff21927fd2c01c9e2cc9cc81a475f5e44aea9
SSDEEP
6144:ykeENDvTSn2SV/GuhYdViC7X57+nMMcU6D3qe:yNEND/k/GLPX57+nvgTqe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ