Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a415e0105769de95bd3f31d00f87f50d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a415e0105769de95bd3f31d00f87f50d.exe
Resource
win10v2004-20240221-en
Target
a415e0105769de95bd3f31d00f87f50d
Size
237KB
MD5
a415e0105769de95bd3f31d00f87f50d
SHA1
f518c84a385c681ecf1537371af77450b9abbde3
SHA256
56524cb01cebf339f9e0461e83e93d4b4612c185834f97e7a6c7509f8e3aaa48
SHA512
a5e132b7aec8e94c9b68f7cf22f75b88a3432e6c154106f4461fe8a847a70742b6548a962a1d935d1451efdda29f0fab5f39f3c2192ef697a3e0ce237c10940c
SSDEEP
6144:703XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBn031yo+vPMGHr:7c1udnLSg03ymK2Ilm1F4a4keMo+3MGL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ