Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
5a277e10dd6e4e13fa756bc808b40c6e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a277e10dd6e4e13fa756bc808b40c6e.exe
Resource
win10v2004-20231215-en
Target
5a277e10dd6e4e13fa756bc808b40c6e
Size
200KB
MD5
5a277e10dd6e4e13fa756bc808b40c6e
SHA1
d1187f2dc7fc3ae12c233c74314adbf3b4d5a786
SHA256
e5413c5bd3e29396dd69c68bda35134b08c98ec6136243cdba83dd34a8b9fbb1
SHA512
d4c065ab0f93415005bb23d88f42f7f38daca77b5383a1f35ad4330006f990874fbec0c8f4ef440feb5936303876b18708e3f9705432bf48eadfbc95f6f08aae
SSDEEP
6144:u7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfR5MLh:u78AqbaVcmAo7cGNpwCi+eQZ5I
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ