Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
246f20e90eeac768e29599d469bca13a.exe
Resource
win7-20231215-en
Target
246f20e90eeac768e29599d469bca13a
Size
665KB
MD5
246f20e90eeac768e29599d469bca13a
SHA1
9b0aa2ab7b218d7afa5aeeda3dda935cb65966dd
SHA256
0ec7a0d32bc8fb232bc4326ef61039a1d9948743479aa4edc6b02e4eee7a7ad8
SHA512
c2e3e0964ff1ca83a88ed77891aed8337ce7d4327a80d26c1b4e098e56eaed3286b9e4dbca3917c25122a9f32983655a493bb867e42e49e3c5394fc0db501b2e
SSDEEP
12288:wbDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMfw:wXbs48LeP0P8E6dclWLi26KGOqMwIMo
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE