Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
589e06e54ea7a8b8ad5b2a7224fcb367.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
589e06e54ea7a8b8ad5b2a7224fcb367.exe
Resource
win10v2004-20231215-en
Target
589e06e54ea7a8b8ad5b2a7224fcb367
Size
236KB
MD5
589e06e54ea7a8b8ad5b2a7224fcb367
SHA1
03a2ad2c20517a6606a44c54c828f49d3dfc5cbf
SHA256
f9d85786345f3e2a9f42e8f727657d3a2065b236eec3d8ddff4825592c110e1f
SHA512
2f2d20ab4e9e0d7e40a210c0239996e646d5f27f67620f8b97e8d322e7aed753848dc7987383ee31e09d386fd905743283d5fb94c8564992fe8e88a6e1f1bce5
SSDEEP
3072:DlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqs8hogIoEJgY16/2Y:w3kOMeaavF17EP6qyqsWFEJgv2TE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ