Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0596dfde7d5678d6bd323ebaf26835f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0596dfde7d5678d6bd323ebaf26835f9.exe
Resource
win10v2004-20231222-en
Target
0596dfde7d5678d6bd323ebaf26835f9
Size
236KB
MD5
0596dfde7d5678d6bd323ebaf26835f9
SHA1
a8091a0bb0c331680cdb90f62d339af4efa147f8
SHA256
21c111e57de87936bb796d738ca748fba280751ae27e46175c21167540a35c37
SHA512
ad762cbee5f60bb964616dfa65f1a87c2c41acc49a7514b08ca18581570d31a3f1e655200394fba37649b87ce37b072cd225a0b1e36ea960b2ecbe94cbddb3cc
SSDEEP
3072:glELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqszJjDO1D5fM6kdfN:T3kOMeaavF17EP6qyqsJyp5fsT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ