Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
79d3c6cd91a0f43d2047073714023821.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79d3c6cd91a0f43d2047073714023821.exe
Resource
win10v2004-20231222-en
Target
79d3c6cd91a0f43d2047073714023821
Size
205KB
MD5
79d3c6cd91a0f43d2047073714023821
SHA1
743b42b417fa68ac1ab50a7cab821129c792838d
SHA256
e9e5b444e84a1ee692a2ad746e4a406e9afa9d9370d587094d9b99d4baeef07e
SHA512
fed26974a1d057282ebeb2c02c38f7e7c47ef8c81bde473e697a594e6a91d8e3a458ccb5c3190ce78efc14c9e1202c20963e987460b24709e3796d9468022861
SSDEEP
3072:rTKa8NoTi3BaMHjCip1qm+f6T6ZhX+m4rHiTs0COHzlwFHn6IMF2ZKG:rTKa8KW3ICj3pun+DHiTs0CUKn6lF2Zf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ