Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
ba44d19e9ce141beded2561fadb31fef.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ba44d19e9ce141beded2561fadb31fef.exe
Resource
win10v2004-20240226-en
Target
ba44d19e9ce141beded2561fadb31fef
Size
13KB
MD5
ba44d19e9ce141beded2561fadb31fef
SHA1
85c68cfbea74834bdfd03579e939b88f87e74631
SHA256
e16785f0ce9ddd78cce15ea41df9d796380ee5d54921a2b38734510569abac9f
SHA512
e76cad70963f914661e02c7d6ebe1a3258594416bc82b8158bc808a2c37206db8f5105b8c46ad0500ed8c1e71778cf65aaef61d98e9a68763103be3549457cda
SSDEEP
192:CS4gbgkAN4SJj+bfrJsUwv7E6MS3GTZr9ZCspE+TMwrRmK+vhOr7:CS4uI44aJ+7N53GTMeM4m6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ