Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
2e5d6c2b8a5b964ce05de3666e82f7b2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2e5d6c2b8a5b964ce05de3666e82f7b2.exe
Resource
win10v2004-20231215-en
Target
2e5d6c2b8a5b964ce05de3666e82f7b2
Size
236KB
MD5
2e5d6c2b8a5b964ce05de3666e82f7b2
SHA1
23151978bf7cfa984cd78aef11672f7d844398e9
SHA256
eedadef5c544d5549b9e5245837e118f6c883d20d4e377e15e14d93f77d92273
SHA512
c3c5a2fb98b65182bc0ce3fcc47ac57e04943b8b3bb0a7edcd23783b1e79cdd34cd6966df8625c837a1f8ac363e5006fe3d83e9726ea7e3d070bdc986904e352
SSDEEP
3072:+lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsroiLq/vX7rFhhbG:13kOMeaavF17EP6qyqskb73EAw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ