Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
56ab0a7fc00da6e7ee526c16235eb90e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
56ab0a7fc00da6e7ee526c16235eb90e.exe
Resource
win10v2004-20231222-en
Target
56ab0a7fc00da6e7ee526c16235eb90e
Size
200KB
MD5
56ab0a7fc00da6e7ee526c16235eb90e
SHA1
102267931fd71b4c538e9d825db51b2a29262ffd
SHA256
e5804872d49c942d1c3eefe4104d348033afc36c53664622d05bed0eeee14b1a
SHA512
bc3171f0d156e8e615e821a77869f191fa13e326fd76f72ba2352de2599ad42eae986bf0c6977f320bde25210bd21b6875468312d035d947563680e27a425a56
SSDEEP
6144:C7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRVO4CXmlR:C78AqbaVcmAo7cGNpwCi+eQZE45v
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ