Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0cf83b668bde40b4a6d1aca7b6e82cbb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cf83b668bde40b4a6d1aca7b6e82cbb.exe
Resource
win10v2004-20231215-en
Target
0cf83b668bde40b4a6d1aca7b6e82cbb
Size
202KB
MD5
0cf83b668bde40b4a6d1aca7b6e82cbb
SHA1
c0c8638d6e4e709a511ced958bf0795201f54573
SHA256
834d9e548958f0eb7ea10ec11624d13fe998768fd6d9edb763b4a65c8b5ac32a
SHA512
253145f518a9020276d067352e4c5bfa1fcb8823178e98eabee82278b4345e02dd2ead8d19631f72fd26eb9b49c7d973b3584984324a803fd3c8c4b23d8faeeb
SSDEEP
6144:32f7xz5jBEciLzLsOu+/ifpY5MY5FjV0FYtOsN/VmFw9LWsoCW:3ul9lE/LsANz5jXtOsN/IFxCW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ