Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6e41654e31cf092d07d6025cf5eb4f3e.exe
Resource
win7-20231215-en
Target
6e41654e31cf092d07d6025cf5eb4f3e
Size
679KB
MD5
6e41654e31cf092d07d6025cf5eb4f3e
SHA1
c7074dfff3ffe22f566b91a6006ff4f4b89ceabd
SHA256
12e30f90aca63569db8413000df2d65a43a26eb1c989796a6c356b97e1d9d809
SHA512
88a58fd47f46273a80e3ae852ab70b6114692c7218dbf15ab52b3c58b7375be7881230619049668c2648e87522db262ac3ebc13555ed211c3b9d75891c66c48b
SSDEEP
12288:NwEZxZLDznQwo5unUeArTE5yjgcy7LxOuH9/7HPuXRZ8dzfPtfdeEvnrvdXZPThm:aEZxZLHnQwOunXLpvwuVbKz81VfTFXZ
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE