Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
670e40aec9ca6e0fcb3b52e04ca28ed5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
670e40aec9ca6e0fcb3b52e04ca28ed5.exe
Resource
win10v2004-20231222-en
Target
670e40aec9ca6e0fcb3b52e04ca28ed5
Size
233KB
MD5
670e40aec9ca6e0fcb3b52e04ca28ed5
SHA1
74b5433fdc777f5c31e0476964f999ca84ad2019
SHA256
34f6f16f1223c255f09c835d0e3ad34c34a4fcb44105a8c1b1272d6fb7eb1553
SHA512
32ebae52e0726437c56af6f645a8978de5d68cc266d2f75e7f09b8a044dc2f99e629c32551f1938b5b32cc9f4a6790bcf047768c833dca941603d0e7d1221b95
SSDEEP
3072:XPpnBtbUuuC3sX+RyN0zrd+jj8k1DxwX0g4v0dgYG8vKGIIHBEnfYjvN3Gi:XFb2zJ+zrWogqX0978vKGNR5Wi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ