Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
08c75f654a9ddf747fe5c4707110dfad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08c75f654a9ddf747fe5c4707110dfad.exe
Resource
win10v2004-20231215-en
Target
08c75f654a9ddf747fe5c4707110dfad
Size
13KB
MD5
08c75f654a9ddf747fe5c4707110dfad
SHA1
b7196cf55458bb5795f1eccdc9f3b0fbf4092eca
SHA256
318c9967ce1efdc2d761312afcfe7d5101a1baeb65acbbc2cac460247d048bbe
SHA512
001c46ea913fdd7e92fca70202cacadd38c0262b18dd7d2b33d3206eb4b3efb27969b7764a1edd88a6dc50dd59239fe033045f3612c9429c3a3788c82669acdc
SSDEEP
192:Lpp/COzVmK54Alwv7E6LmIwkz8r9ZCspE+TMwrRmK+vhOrA7:TaiA7NLmfkzteM4m57
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ