Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
bc0e79b4e3d9da2d7777cf90fbee0d8b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc0e79b4e3d9da2d7777cf90fbee0d8b.exe
Resource
win10v2004-20240226-en
Target
bc0e79b4e3d9da2d7777cf90fbee0d8b
Size
562KB
MD5
bc0e79b4e3d9da2d7777cf90fbee0d8b
SHA1
050db6e9c742e1ea64d34837d6d6f156666fea0b
SHA256
bf8d314315fffb8fc8e1640eea6d69fd9c86d4eed583cd912bd3fb7d4782ba90
SHA512
55c4221733aae60145ae592e91a851214bfb05279c08f79fb1124ccb644e75037426dbd6dce46e1103ee90b01961302ac9ee6214d449aea28cc82ff505c3fa0e
SSDEEP
12288:3C67phVWLD0hSXkh/JR7OxVwRQFrgNG0dB4E6aD7kV8:Z9of6/7OjwRQeGm4EtMV8
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�}"�j���=�v����n#�N���^2a����D�~gP@�,��$e��c���ϲ�s�AC�6��SD9�S��5�������� �Xc̒Z�+�:�u��,t�+�[�����ȅ�����'j��Z .1��uI7��*��d>�8b Jڡ����U�W�.�|�*9�,f-��N�1�Y��A����?H� �C: ���t^�װ�����.y�}��v)q��&� �QƵ�*�c��x���{��H��E �"�V�+<�#��=M?����!�N͡�^�6�5������������8��c�H��4�MF�#��#J��x��?�Z��N�y���7��@<�;-��"W�O��:�U�6,�Z�s���E@K`Z��� �����:Gpsi���BΚ��ʋ1��O g���Sf?C��z�&�|��3~���4l���911�i�ַ�����Q�V�����8���nE���O����5xS�j���-e5D�����MD�$M���CbUi���ҵe註L���x����0H��B��y�ׯ-1���>X_�z��cJ�Щ��|�~]:�*��Jw;N��g��#�?#�`E��J0�VhQ(�C���D����3%똀Q�/�o���\z�#<z';��:X��ZJ����9��;�4����#��-yf��B��K�F�ӔV(��&a��:��� {i�П>��ѹ�tX�������<v�G�4pY�4R~)6��܆���CM��Y����1@��_N�`߇{��za�8��{ư�r����3=���f�̊�#�\#*���m�g`��s�����:���R�F?�t�CN���F-.{�$��P��qc<&f�X@њ�$������B2������s�Ђ��%��s��'��)��ߪz8a��e�7[J�����7�(�X�M�ʰFW��G7��E��[3�=U�ۨa���Y��+M��1n����B���h���H��ۡ� !��ok�s�i�Hf@$���V�kCJH��c*n���`�����|�a�'}�� 弈����� ���W~���JQ�Iv`���5-�T�ߤ+�7��TTW�_��� ٱ_b����`Ɏ_�=T�0�&�U�F�l�c o������<��^L��ܜ�aBs�������J��� �����*���rT�;͔xnxܷL����������,��Kj�)̰�p�>����g�����N��㇕�f��c�� ts ���H:�2.�Ϻ��9�'�H��4�D��8u��L �ޥ�����(���nl�N��Í+���I�k�R"�ލ� t�=�� E�s�#Y.�U���xm��v����k�]�?��I��ԷJ�C� �]z�F��Y���l��t�šz=��5ު�b�f�|��W�l}o�aՐc�K�`4�{!?�Y�*�������)�^���FrŚM����UJ�9Y��ZIm�pq<$�g�������b�@1qs�;ԫ�#D��:�Ԑ�z��r+�����$+�JS!��-;ҫ�Q���ݠAL���dn�Laa�7Ý��ZM�X�vtmn���=V�|Ԅ��J�x�d*���A[BN4p���c|��LF�NIA_EF'qSW�kR��'�Xc�2�.��1U�O#�D/�G��O���H�L�c9r_ϒ�����'7-���8%qHoI�Y��r q��X��,#����J�T� �R�.��Ëv���>���~�nLr�_��,����\��^��NB���f1�����g�#g�4!�$� � kպ��rլ�o�Lͮ�K��n>W���#p�~з��C����Y���2[�\+ΛX��7M�w�>c�I��� ��j$89�~�_����`�j��r����"��d(��<3�; !ҽ뿧��]�����$�/�"�gq�ߞ��{x|���-�/��Y�h��]�}T�y�3a~Q˜zo�z������/�."E���!���l�(?oIx)F�!��٫��躁B�ÚM�at�!puh�Q�����j�Jd�@F��`�:������VD{,��T��D�z/��%)n�a�J� ���+��r�����o�� �v��,����氃 �hS��� ��ccs��{ã�{FC�^���5;��L�As�G��s��q��c�)P���2��G��)����|6sP��be'ȭ�y����L�%���:�?�I�|4�����)�ﺗi���o����.�}5QYw�J����$� `'����\���(����2�l�W�ΪqC�*�0�.Km�����Q�Tq:/�T�>��`���x�l/;�qx4yļ�KC��A vR�t`t�P'D���wgh������&B��_�*��-��j�M,.ܦ��?I�>M�L��W�$�:�zz,��Շ�Ԛ����#O�u6D�����#%'�AE�9kT��h�z;A���d�I��ۣ�Oe���?���Y�M����ɷY����<�� �����L��9�M �XI��"1�w��Fl1(r@˨�_�g�'�M%�K�z49��Ʃ�*�=���{����o����)[��a��t�� \�,�# aP�) �C��~���$ �����P���t�bȚ�g>�0`��^�%Uhe���%�[�%�(y�'���ǾB��U�)��ɻG"��41-���2�L�*�������T�QȈNC-v����F�+齱��g%�sQ�9�ƕqc}��_A7����$�j��v�l�����_�P</u�b@����-�b�|m��uE0��H!g��Qjme�Z�5�����ь��0��� 2���3����ч?|3�@{`9֭ �q����T��������i3oXd���]xX�!v����e ��c$�WE���r5�t����,d�5� �x�yZ $�`�4Fܱ" �$}�_m*b���b˨6!!�-2���}iy}V&f�"���u�4Z?���H�;��$L�3��v��0�_�"�nNvd��O�v��v�����F*���?v(9���P����o�W�;��q��\��ו����O;���*���8�j�#���`��$
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE