Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
328ee9cb422b2656cfb0d1c1ba2d66c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
328ee9cb422b2656cfb0d1c1ba2d66c3.exe
Resource
win10v2004-20231215-en
Target
328ee9cb422b2656cfb0d1c1ba2d66c3
Size
236KB
MD5
328ee9cb422b2656cfb0d1c1ba2d66c3
SHA1
b8cdf9f41ffd88c927f9081c9623d16a84e600ce
SHA256
6bfff1e37ad1f692973863d3f6eef2403ab30c2d11f43588171cd3994d9f9f0a
SHA512
4b2de9ebd88f0e7800d1bad90add456228101e917c6fc015ef9bb680db52941ec7c9a51d1bdcd4be0a8658792ffec6dc0672da37f378264fe90d2a27d9c17f1a
SSDEEP
3072:VlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsIE0rOCshgG5ewoZ:e3kOMeaavF17EP6qyqsIETCshgoe0sjR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ