Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
aa43219ce68cc469bb741c38e8514dd2.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
aa43219ce68cc469bb741c38e8514dd2.exe
Resource
win10v2004-20240226-en
Target
aa43219ce68cc469bb741c38e8514dd2
Size
193KB
MD5
aa43219ce68cc469bb741c38e8514dd2
SHA1
579d1749ed2818ced3285915ddd07b4b4c1eb34c
SHA256
7816bc5cc7e66a10dc280dbfbedc05fe0ef338fc2d1a9a0baac616004b4886bb
SHA512
04dda1d2501b4c956c608131ba90e5c25ae5d4c2b0dd084555c2151fc857e5ff24488afc937098bfc5be1af344ddc9b50d3c4344814fa0afa96024d928e93dc0
SSDEEP
3072:XaU4g9l3XRuWI+1PYg1NtBFEo0q5PbNJn8f/VzX9jH+wOlPer8C78/gAjGdlF:l9l3B5PXmEtQf/tC2rRYHGHF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ