Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
74f987e69a60c161478e83ce2d494779.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
74f987e69a60c161478e83ce2d494779.exe
Resource
win10v2004-20231222-en
Target
74f987e69a60c161478e83ce2d494779
Size
233KB
MD5
74f987e69a60c161478e83ce2d494779
SHA1
4c6f49c386166eaf2a1c4cd917b7b57addc804a1
SHA256
3bc86b4a1b04191716c96bf7752422c9691a5b4022d2ea4df50e750a6dbcc148
SHA512
c56001e5626be22413a98998143a5b2a7e89891a556e61450955be2165c7b8dcacecc8fa63e307cec9e86d2605b95eb071a7d8e507dc67109576a21823ade564
SSDEEP
6144:1Bgz+VVyLSj1Ys3da3vpP0avnOt6uvmNZXSFmJtf6VfP+5o:qWVp3A3hcavOtcNm/W5o
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ