Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
7378a895fdf43d7c9c3378226a0b3e94.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7378a895fdf43d7c9c3378226a0b3e94.exe
Resource
win10v2004-20231215-en
Target
7378a895fdf43d7c9c3378226a0b3e94
Size
381KB
MD5
7378a895fdf43d7c9c3378226a0b3e94
SHA1
2cf898360c3427316ac0a80918dfc59d39e878d9
SHA256
1380c87c70efe2e3ecf0e1ace5090beabe1aa4c9b9ae1677e4f3a40e1d64de3e
SHA512
dc55bee3ae9721cab253eea93bdb756bc367df1a71295a68ddbc7d52dfa4a17a95bfb530dc4e75461c8c7afa93779a8053a0ccc00f21158fc5dd76f0efe4f84c
SSDEEP
6144:Jfxjxvjpe238JMJRMVkvkcyc65DECBe2UQB343iTYOGQKnO+4zxbOsQ:JfnbsJiRQf9VnBe2U8ISUZQB+kbXQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ