Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
484f66d1d6b448b34aa4b238646f241c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
484f66d1d6b448b34aa4b238646f241c.exe
Resource
win10v2004-20231215-en
Target
484f66d1d6b448b34aa4b238646f241c
Size
241KB
MD5
484f66d1d6b448b34aa4b238646f241c
SHA1
8496ae6f8894f48ca2aaef5686e9aa54e7ef252b
SHA256
082b8ed10c0c422bddeba1941f55345fab7b705ace8fc9dde9faef7c3c6e1d6e
SHA512
769da98e13516d6f86b13eb159c14cc2c0c42860f9448b65a62925f83498b36e8627b04af881db0c155a93645bb29e5ffadc4e4479dec91431184a224cc912d9
SSDEEP
6144:1keENDvTSn2SV/GuhYdViC7X57+nM0V0y05Kjz+w:1NEND/k/GLPX57+n35Tz+w
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ