Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
a20ce09636469d87dbb1d841b08931d5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a20ce09636469d87dbb1d841b08931d5.exe
Resource
win10v2004-20240221-en
Target
a20ce09636469d87dbb1d841b08931d5
Size
198KB
MD5
a20ce09636469d87dbb1d841b08931d5
SHA1
a0050b782e8c936a9d893206e79e866b007556e0
SHA256
94a1e1889e357585f9a20ea16131e1f35a02705758176b3b5cb6112c66b992fd
SHA512
7b32137e63a0dfacab0f3d1f7e478819f51c363bed633c02a37a224782e1bc44f726fb561dcd7fe51657f722da93e35dec6fadf4994b2e898c2e535a77320a82
SSDEEP
3072:bVKhO5BjuQmorMbQuXIrQirJVBVAci6X76GP/mA/c1qLqQ1DJGeIeAZRUm:Ac53ME+IQiNrVA86A/mSCqO0RATx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ