Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
37d8b58bacad8ffff2a3a67948a114a3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37d8b58bacad8ffff2a3a67948a114a3.exe
Resource
win10v2004-20231215-en
Target
37d8b58bacad8ffff2a3a67948a114a3
Size
8KB
MD5
37d8b58bacad8ffff2a3a67948a114a3
SHA1
8b9b48f5a677372c628f7ab023d01f72c4cfef4e
SHA256
76fd4907e84038b4ada86ac4aeb1a28152e0a6433b8d57d042bad7f0ccb57c5c
SHA512
9d64f076d92448724f4229a2cd7a7e1075c2516d5c33890f1182ac5c16ee776679e80ca73a22241c7b423bcea862a5f0f920324df989d46752e451a4720e36b5
SSDEEP
192:xhLnNjAZtoQpt6As6c2yHJgWOUzMaZnwo:xHaoMs64Hz7nh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE