Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
9b6cd84822223d6159c04176dc9080ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b6cd84822223d6159c04176dc9080ba.exe
Resource
win10v2004-20231215-en
Target
9b6cd84822223d6159c04176dc9080ba
Size
13KB
MD5
9b6cd84822223d6159c04176dc9080ba
SHA1
291ecf64d05bcf56e6541ee19bd9ac7420491c14
SHA256
1cefefbd55b417d87211568fb335efa949e9a65b499fdea8ece0f8e2e4b89f0c
SHA512
636ebf156ef0d1c6cf2210b9619a46441d470880c7881044f00e6520d0db55c71f36c19d4f4784573e6cca20f213cc6af6121d7b852b07122229a23ff8241723
SSDEEP
192:OS4gbgkAN4SJj+bfrJsUwv7E6L/DLQOr9ZCspE+TMwrRmK+vhOrE:OS4uI44aJ+7NPEneM4mR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ