Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
63bf73eb484e2eb036bffcf6eb9d14f6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63bf73eb484e2eb036bffcf6eb9d14f6.exe
Resource
win10v2004-20231215-en
Target
63bf73eb484e2eb036bffcf6eb9d14f6
Size
13KB
MD5
63bf73eb484e2eb036bffcf6eb9d14f6
SHA1
419dcbf78eff504427c942f6a6e6f8f61cadc14b
SHA256
2e06bffe28658337b428e3eedcfd346529418eedf6df85c6cf01a3614d97b2ba
SHA512
e24df15bd877f035e7c39381685bee0a1178dca9b024f0c18b3affbadfa1deaab94a8dd5a850f89c0f96af90711ec7103d02e24df5cbfdc4b5eb192037f68dbb
SSDEEP
192:LFp/COzVmK5y1Lv+lwv7E6qm4cdXr9ZCspE+TMwrRmK+vhOr839:vaiE1Lvx7NX4cdyeM4mpt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ