Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
20ccfa42d6ce3eecfd4c84879f28099c.exe
Resource
win7-20231215-en
Target
20ccfa42d6ce3eecfd4c84879f28099c
Size
665KB
MD5
20ccfa42d6ce3eecfd4c84879f28099c
SHA1
ee47e6cbda5506e594993bbaba4504b309408866
SHA256
9e9510b96175fa7573acfac14ebc8705f3ea360d4e5e1b23c701cb4a83836116
SHA512
cb89d1efb489308bcb05d7f58dd6b358b536286d0fae557f6439b3947d1ae3d2fedf42dd76565f2163e3fb01241ac01cd384b65d9002c9c3e53585a2ca6ce098
SSDEEP
12288:+bDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMf9:+Xbs48LeP0P8E6dclWLi26KGOqMwIMV
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE