Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
8b4f9b136736b2adad01bec9a29400bc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8b4f9b136736b2adad01bec9a29400bc.exe
Resource
win10v2004-20231215-en
Target
8b4f9b136736b2adad01bec9a29400bc
Size
217KB
MD5
8b4f9b136736b2adad01bec9a29400bc
SHA1
a1fe48f2b37de31d8618b21d097066cf47e7e8df
SHA256
41b4b5c51e7f2deb53ba83a07fa8c23d3bf58ad4d1869547ae484f050a500bcc
SHA512
328fc9ba8c84ac39d4ec58f681c8ca23792d4d8fca95722c66bff8dcc76cf46f90efe16f2d1ca179b780949d1d7307194ac035fe7c8c6bf9b17f218515dbf054
SSDEEP
6144:pWTwl/5AtJbJIFtTgVnIY6qnI5U9xi14ds:pWTgUYT8IY5hx1ds
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ