Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4e13ca88a5a961b1414cf3081f96a659.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e13ca88a5a961b1414cf3081f96a659.exe
Resource
win10v2004-20231215-en
Target
4e13ca88a5a961b1414cf3081f96a659
Size
236KB
MD5
4e13ca88a5a961b1414cf3081f96a659
SHA1
7fd36c0b7c9aa113a8f43adaaacffdf11ff06acb
SHA256
02f0eddf7b63eac75cbef670d570eab66d71e4aade6ed9ca1f6ef32ee98c0788
SHA512
1845826dec27fa31efb74976ea8542fa8e3fa3ac727e8afffda152cbd3d2f59e707965110318b5de169143d01105db33cd142abe2ac09e01f237530d4c5342af
SSDEEP
3072:llELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsRdt5dUS6tk9W:u3kOMeaavF17EP6qyqsFDUj+9W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ