Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
12fc95e4a99eae52dc65e0d3471d1e59.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12fc95e4a99eae52dc65e0d3471d1e59.exe
Resource
win10v2004-20231215-en
Target
12fc95e4a99eae52dc65e0d3471d1e59
Size
13KB
MD5
12fc95e4a99eae52dc65e0d3471d1e59
SHA1
65bfa4d552975755174019395fec701bf5d9f16c
SHA256
16a284238f66837d46f24d8f18a88a3256a5c3e85747ac55289d9bd823e5c390
SHA512
1ecaf6ff011d6299c37cc8f9f395cb270168d3e35a56c5a72bba052e46c4d9e0332d110a3734e836d85dd3e69e6bcf681f157e6a48d5a726a34e4712c54e013b
SSDEEP
192:OS4gbgkAN4SJj+bfrJsUwv7E6PHIarFWr9ZCspE+TMwrRmK+vhOrQY:OS4uI44aJ+7NPHtFeM4mw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ