Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
10b3c7d3982a140ceb57326ce14fe108.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10b3c7d3982a140ceb57326ce14fe108.exe
Resource
win10v2004-20231215-en
Target
10b3c7d3982a140ceb57326ce14fe108
Size
241KB
MD5
10b3c7d3982a140ceb57326ce14fe108
SHA1
cae917b62ae721d11021b8b4bf630d94406d0104
SHA256
5aec4b61da36b30cc308536ed5146fd73e5785f2c2acb8953023d722f56847c4
SHA512
19c87daec11ddc5bcacbe35affab9b798b91a4fd076bc1b483c8a3fb1332292aba748782bd256974b0cddee2b2aac00faeed4bad0033799722c18c4a7c07a3c0
SSDEEP
6144:0keENDvTSn2SV/GuhYdViC7X57+nM+bCsxdlZ:0NEND/k/GLPX57+nVxJZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ