Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
2fe5ae6cf94c880b25fe12f9d4f5c725.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2fe5ae6cf94c880b25fe12f9d4f5c725.exe
Resource
win10v2004-20231215-en
Target
2fe5ae6cf94c880b25fe12f9d4f5c725
Size
59KB
MD5
2fe5ae6cf94c880b25fe12f9d4f5c725
SHA1
15c9afb742fded6275d020b371c288335d14440e
SHA256
73fb0f38d31068b70823ea2e8d04430bf7a2771955d2223023d386d18668c9a4
SHA512
7b472b45bdffe0b2622af8d5a5cb03ae3967ed88210d1d4ba92fce9ea369035e49deb350deee189e7441b07cb150a069ef16cdd7b6cadd92a0c8b9f7ee4a93e6
SSDEEP
1536:NI3I9tnQImgFEGVTEOLgG14uF9hwk9kmoR/bxuI:2wRZmgFEGNLjTFj9dov
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ