Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
7a5cea67d29b2fe8f69b95d3fd6c0bbb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a5cea67d29b2fe8f69b95d3fd6c0bbb.exe
Resource
win10v2004-20231215-en
Target
7a5cea67d29b2fe8f69b95d3fd6c0bbb
Size
236KB
MD5
7a5cea67d29b2fe8f69b95d3fd6c0bbb
SHA1
6c699f2c96394993ec5823cbe36a145d0b344032
SHA256
2cc657e9444387786fc14bb7e326ebd5218878e085ac45ad3cbbf5275e64a124
SHA512
b8570933307a6b817b3aa22e1e9e25a007cb27999238d71695efe234cf6818b8737e80ce02c7775f258408cc6d7814620551c96e846f49b7a7f36fa916b2152e
SSDEEP
3072:1lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsgL+LWZ/8Xg2etf3:+3kOMeaavF17EP6qyqsgL+La/CYR8ksC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ