Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1f72ab81bfa96a8f5b04ee84dec2c4aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f72ab81bfa96a8f5b04ee84dec2c4aa.exe
Resource
win10v2004-20231222-en
Target
1f72ab81bfa96a8f5b04ee84dec2c4aa
Size
240KB
MD5
1f72ab81bfa96a8f5b04ee84dec2c4aa
SHA1
04e354140f03b0372072be4846ed29e766d42c54
SHA256
1c47c4ab7ad633c42e7fdec5e2033d968ff24f110854ff1d6f0c1d09df8fe39a
SHA512
7b98d7d87bd37e253961862ed0b5dd2c8b829e43adb6d5f1977401e17757fe09a99c26a9f39264de0d4a3b5e801e19b151d7bed4c23d6fc069906bc0173b8452
SSDEEP
6144:wK5lxWZmdARycX+x198PYyGghIjL7CSHu:/5bW+no0qPY1ghbGu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ