Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4020f5a8002d6639ca8f4c6cb0c40d05.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4020f5a8002d6639ca8f4c6cb0c40d05.dll
Resource
win10v2004-20231215-en
Target
4020f5a8002d6639ca8f4c6cb0c40d05
Size
27KB
MD5
4020f5a8002d6639ca8f4c6cb0c40d05
SHA1
d617789593afab4b6d4f0dc77dcf8d52baec199a
SHA256
4f83b6b7da3c8914883b309e2f2d6cf7e91175d3c274615e23309581178a5df1
SHA512
ed185a6b78d51fb13e5281cdaebffdfd2148245c6082c7aecb9879f989978e8654d26d4b50e229ffd793d2d1883312123a0f9411f348d7e1b53ca70ba8b75a34
SSDEEP
768:pisbLjah2DO9ACRkSmzmTOVPATMYts4SLgr:pi+qvGuM3Adts4oe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ