Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
7967ebdc1a052cd520e8d2fd38d52930.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7967ebdc1a052cd520e8d2fd38d52930.exe
Resource
win10v2004-20231215-en
Target
7967ebdc1a052cd520e8d2fd38d52930
Size
196KB
MD5
7967ebdc1a052cd520e8d2fd38d52930
SHA1
f0b34b6b16c378b658edfec682f93169cd91d54d
SHA256
24b8f95d5e02fad484ee426f500268982013b7b2f8efe3803ec0678c2701b596
SHA512
8980b9b9cc262518d830619e7ec5507123ee823912c34f6e7738fa383a38aa84ef56bebf69b4ad295e98eb20e0d7c8db98ace3748e953c9839dc79b7f8c6fb83
SSDEEP
6144:b3FyIrMcXKEO0nr+IKm5U4wAu7tFRPaXPHslc:rFyfcXf/rvU4Pu7tFUPs6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ