Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
4d3fe7e7b8c4f89b09f1877ff8744152.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d3fe7e7b8c4f89b09f1877ff8744152.exe
Resource
win10v2004-20231215-en
Target
4d3fe7e7b8c4f89b09f1877ff8744152
Size
1.6MB
MD5
4d3fe7e7b8c4f89b09f1877ff8744152
SHA1
814dbbe016640db8943caa9ad2664f9706dc0334
SHA256
7ff5c80f523aed49fd26b05fd8803bdbf089f574263d282fe3d8573e9f5ae43e
SHA512
14231cd86c4d34a19772c2ae2898019c0f15546a1642401b5febc49dc53d4e53e063443928c8a03fa2714c9bb36da2707a0a2dc972b133381f92f1d0c97d10a2
SSDEEP
24576:VPNoNytSgfSDCwNOZiXhCPGi6SjPR3pEVKAtiOms0fw96orlcKDRSGQjW7M4Mha:VlowccWEIhvRQSFtNGfMVD/QjW7gE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ