Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
49cf52a70d4f2a4d637c4c8c51c64971.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49cf52a70d4f2a4d637c4c8c51c64971.exe
Resource
win10v2004-20231215-en
Target
49cf52a70d4f2a4d637c4c8c51c64971.bin
Size
230KB
MD5
49cf52a70d4f2a4d637c4c8c51c64971
SHA1
c31ac43764195e8bb39dce3a64d297309a46237d
SHA256
30e3c3007e0c56da86bfe4f71b6918810676b1dc6d84c8f58a0f21a2eb9d6cbe
SHA512
026019817da517a223316305089529ae60c4fa8992aa410727dcbd79b53cd059ce0dacb3f3f58ddc59fc67aa139f3abc353b162b901308878b3660cb7891b482
SSDEEP
6144:GQ2E205qRTe5uht1lIJTgUl4epYz4Q4yu9gBdSBrZcP7o:G1N0IJeI1yd7py4ZyzG+7o
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ