Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
ad05a3193e1a8a885bd68c1f5580c11f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad05a3193e1a8a885bd68c1f5580c11f.exe
Resource
win10v2004-20240226-en
Target
ad05a3193e1a8a885bd68c1f5580c11f
Size
203KB
MD5
ad05a3193e1a8a885bd68c1f5580c11f
SHA1
47fd134c15c08261807035ec866c6b075d759c4e
SHA256
9a8f9a4e405e5bfbb5d2c354eeac32743fa87a94463c1cc188cb8f6554a2a712
SHA512
f691caf5e9ae3cc64f880ccc399cd0e860563fd26c2c1d07926fdfbffdb516961f9d15988ffdc5d47478e7997b59b18cbc16e74ac6cb67f197e0f93b37956b63
SSDEEP
3072:y3OOFEyGF17SENOuLYp97YYZG5v5x255ZESOZRzSZZsYaGOYmpghR5VlKSI0mIY+:IiyqRSg03ODx42ZRUZhazuhZlftmo82
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ