Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
9a2172148c1d016b8e2a10a4aae4157b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a2172148c1d016b8e2a10a4aae4157b.exe
Resource
win10v2004-20231215-en
Target
9a2172148c1d016b8e2a10a4aae4157b
Size
241KB
MD5
9a2172148c1d016b8e2a10a4aae4157b
SHA1
6286ca811dfd5d91c141cf35951f385fa191f22e
SHA256
28ca8403ce37dd9697b9ee4dafe04aadfe8260374e0aec49c520dae8f0da2170
SHA512
8cf79ed99ce58df393372b3aeea2a4f868d303e4352c8a2e9916d5f78c6ab7a2100f91b8c5f48369c6a1efcbbe118adb08620eac349d2f960aa62d94d573b848
SSDEEP
6144:KkeENDvTSn2SV/GuhYdViC7X57+nMBpD8CI7+KjU:KNEND/k/GLPX57+nIpod7xU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ