Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
512d93cadeede431b83c5d8f61bbec21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
512d93cadeede431b83c5d8f61bbec21.exe
Resource
win10v2004-20231215-en
Target
512d93cadeede431b83c5d8f61bbec21
Size
76KB
MD5
512d93cadeede431b83c5d8f61bbec21
SHA1
271abeedf8029ba03baedbf47c14f478de5f1743
SHA256
a7a171ca8d7c03598ef0750e2baa3947a8070f1f44c2509eb369e2d34929d2dd
SHA512
6a058b2c24760269e459dd87841e438592898b121a83dd7a78d22ba5902ec5b67c3498c8e9d1ad13d2e2a02ee5ddea2df362b90d0b1b0802b8afcb60529a68e8
SSDEEP
1536:sqmu0lvpI/5VRdvA5BslnQd5b7SaPopOMUEPdVXmTAa/16MFZ:8xv2BdvA5Bmo79gLUEPrW5tFZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ