Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
20df12792a4b0c13bde7639ed25dc27f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20df12792a4b0c13bde7639ed25dc27f.exe
Resource
win10v2004-20231215-en
Target
20df12792a4b0c13bde7639ed25dc27f
Size
196KB
MD5
20df12792a4b0c13bde7639ed25dc27f
SHA1
7a3e9ab13795bc3d54bd20d17ecdcd0544e993cc
SHA256
40e9e65e6706ed5ba2bedd8a8444743628474b32b20de8561aedb45fbd7bafd7
SHA512
29b6b519325b0ae4b3ede489585048ae66c8b1a77a82bc7d025c8f6fc6f6d75a984b0b2870aa9f499e52538bd82c281dd2df46ac15af1aeb56301304c59804e0
SSDEEP
6144:qvr1LkOhUH8coShbQL6GtgYyV69MgyS7HRM:6r1LkA+zNhsL6G6jFgySS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ