Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
75d1ee8a16949a244f0ff3ff2e1f4a49.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75d1ee8a16949a244f0ff3ff2e1f4a49.exe
Resource
win10v2004-20231215-en
Target
75d1ee8a16949a244f0ff3ff2e1f4a49
Size
13KB
MD5
75d1ee8a16949a244f0ff3ff2e1f4a49
SHA1
a79b7a41852d10e59011503546ecd2056064797d
SHA256
dde185e984146111577038587c99bc11569127b4d1a904f92b0d26131aad9a45
SHA512
6a86fb0dd1838f2cd1ff1a6e20ad53295114932132636b8f669f1511afddcbe97e2af21b48f97263584db085490eb00451ce26c069feddd3d80c4255b50c320f
SSDEEP
192:Lu5POEuXky9UAMG5Twv7E6TFUHSr9ZCspE+TMwrRmK+vhOrv+A:0uXkymAMCo7NTFyreM4mc+A
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ