Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
556f431d8284bf17efdb7f7bd1aee5b1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
556f431d8284bf17efdb7f7bd1aee5b1.exe
Resource
win10v2004-20231222-en
Target
556f431d8284bf17efdb7f7bd1aee5b1
Size
200KB
MD5
556f431d8284bf17efdb7f7bd1aee5b1
SHA1
8b630d9123074bd6e22c94d5ea0472b160491848
SHA256
dd782757f5539a3aceb770266418056fb968117305496b37a176bb3bb7f5163e
SHA512
11acf3e6970c84db367923cd9035407af13ac8c2f9a8659a2ef49d9dc42f6ee5d73029160b5d6942f94c9388039729e0b53620ac53b0fb5f7a4943a7ccf8bb0a
SSDEEP
6144:W7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRVFu3N:W78AqbaVcmAo7cGNpwCi+eQZVk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ