Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
27ef8180f89d586fa582870aff44fba8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27ef8180f89d586fa582870aff44fba8.exe
Resource
win10v2004-20231215-en
Target
27ef8180f89d586fa582870aff44fba8
Size
11KB
MD5
27ef8180f89d586fa582870aff44fba8
SHA1
68962a6e91e9b3f5816057b9bc0352834b26606b
SHA256
574709ec30b0b09a05174199e55f62be4e93bff4c89e860fb755d34110e49755
SHA512
15faec9a1d30610e84e08c836f07f69b94e297c168e038dbe25ef259894fbbcad79aeb35a17e969ccee24dcb09d6d3c7d556c45bce34ad152279b72238e8b083
SSDEEP
192:OwyHxDq51OZpNj2Ief7KPa5bkKr9ZCspE+TMwrRmK+vhOrFAZj:oxG12NjOKPRjeM4mQK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ