Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
485a204ca5ead111e1aab3a0981e8481.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
485a204ca5ead111e1aab3a0981e8481.exe
Resource
win10v2004-20231215-en
Target
485a204ca5ead111e1aab3a0981e8481
Size
194KB
MD5
485a204ca5ead111e1aab3a0981e8481
SHA1
50f230e857ed2586075db66d5968395fe5bd95ca
SHA256
e0f1b08b8582f5e59f07ed4f370435583ba6353b33c7e653b02dc354accb35b4
SHA512
2293294df29f6b6072774f593f4f914b7144637fd7dc7b419ba37970f5050b0afd8cf50153cab36d7f381f995f5fb2d906210e7df50399ac15ffcd7d0b7eb3c9
SSDEEP
6144:wD2JXPXyZe2sgp76QGfHCIjEcqRT+XKrUdA:C2J/oEHCIjEP+6rUa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ