Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b61f5ee8c49f20ae412b74a0405003e8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b61f5ee8c49f20ae412b74a0405003e8.exe
Resource
win10v2004-20240226-en
Target
b61f5ee8c49f20ae412b74a0405003e8
Size
203KB
MD5
b61f5ee8c49f20ae412b74a0405003e8
SHA1
6c3bc4ca263fd762bceb6283be2847efc591d974
SHA256
d2def861edd2940efc1d82d93106f52a3972685370078707b51610efdf519011
SHA512
216008bbcfb2425e59d7990f77ce6f854a9f377c628768aa617a601a2077a21e9fb8d90df509f3aee5a8792a7b2c544b8c755e36be7ef38fceec2c8da992248d
SSDEEP
3072:VhGJR3yV3O8CYdhyp5s2KoNPu56NuzdYSTnjFb3uqAlUMxqRj3geDakJB6zZQow:GR3ke8NEZrBxEYAjFbejlRMDaGBuq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ