Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
039730feda4ac9c677a16505b6d97012faa3227e7966308351b7de8eeabfc32b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
039730feda4ac9c677a16505b6d97012faa3227e7966308351b7de8eeabfc32b.exe
Resource
win10v2004-20240226-en
Target
039730feda4ac9c677a16505b6d97012faa3227e7966308351b7de8eeabfc32b
Size
1.5MB
MD5
3dfa71248fab815d13189238415a474a
SHA1
3203f015459996b493a32c79265855d19f7c1217
SHA256
039730feda4ac9c677a16505b6d97012faa3227e7966308351b7de8eeabfc32b
SHA512
1c1ccfa3678339d15907e3e2ae3f851a4685040a5f67e3a33bbbcb451c318a04625a683f345ced169f98f751853ebd6a65e70c0db66add1eb89198ae76c2cda2
SSDEEP
24576:uGUaCtULsUlUZcMDAC4WMl/t2umFvKcXundon2yY792W6uncScu+:uGUaCqLTlyDZytqFvsyq92W6ucxu+
resource | yara_rule |
---|---|
sample | UPX |
static1/unpack001/out.upx | UPX |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@$xp$18Gnugettext@TDomain
@$xp$18Gnugettext@TMoFile
@$xp$21Gnugettext@EGGIOError
@$xp$22Gnugettext@EGnuGettext
@$xp$22Gnugettext@TExecutable
@$xp$22Gnugettext@TTranslator
@$xp$23Gnugettext@TDebugLogger
@$xp$23Gnugettext@TOnDebugLine
@$xp$25Gnugettext@TGetPluralForm
@$xp$28Gnugettext@EGGComponentError
@$xp$30Gnugettext@EGGProgrammingError
@$xp$30Gnugettext@TGnuGettextInstance
@$xp$32Gnugettext@EGGAnsi2WideConvError
@@Unit1@Finalize
@@Unit1@Initialize
@Gnugettext@AddDomainForResourceString$qqrx20System@UnicodeString
@Gnugettext@DefaultInstance
@Gnugettext@EGGAnsi2WideConvError@
@Gnugettext@EGGComponentError@
@Gnugettext@EGGIOError@
@Gnugettext@EGGProgrammingError@
@Gnugettext@EGnuGettext@
@Gnugettext@ExecutableFilename
@Gnugettext@Finalization$qqrv
@Gnugettext@GetCurrentLanguage$qqrv
@Gnugettext@GetTranslatorNameAndEmail$qqrv
@Gnugettext@HookIntoResourceStrings$qqroo
@Gnugettext@LoadResString$qqrp20System@TResStringRec
@Gnugettext@LoadResStringW$qqrp20System@TResStringRec
@Gnugettext@RemoveDomainForResourceString$qqrx20System@UnicodeString
@Gnugettext@RetranslateComponent$qqrp25System@Classes@TComponentx20System@UnicodeString
@Gnugettext@TDomain@
@Gnugettext@TDomain@$bctr$qqrv
@Gnugettext@TDomain@$bdtr$qqrv
@Gnugettext@TDomain@CloseMoFile$qqrv
@Gnugettext@TDomain@GetListOfLanguages$qqrp23System@Classes@TStrings
@Gnugettext@TDomain@GetTranslationProperty$qqr20System@UnicodeString
@Gnugettext@TDomain@OpenMoFile$qqrv
@Gnugettext@TDomain@SetFilename$qqrx20System@UnicodeString
@Gnugettext@TDomain@SetLanguageCode$qqrx20System@UnicodeString
@Gnugettext@TDomain@gettext$qqrx31System@%AnsiStringT$us$i65535$%
@Gnugettext@TDomain@setDirectory$qqrx20System@UnicodeString
@Gnugettext@TExecutable@
@Gnugettext@TExecutable@Execute$qqrv
@Gnugettext@TGnuGettextInstance@
@Gnugettext@TGnuGettextInstance@$bctr$qqrv
@Gnugettext@TGnuGettextInstance@$bdtr$qqrv
@Gnugettext@TGnuGettextInstance@DebugLogPause$qqro
@Gnugettext@TGnuGettextInstance@DebugLogToFile$qqrx20System@UnicodeStringo
@Gnugettext@TGnuGettextInstance@FreeTP_ClassHandlingItems$qqrv
@Gnugettext@TGnuGettextInstance@GetCurrentLanguage$qqrv
@Gnugettext@TGnuGettextInstance@GetListOfLanguages$qqrx20System@UnicodeStringp23System@Classes@TStrings
@Gnugettext@TGnuGettextInstance@GetTranslationProperty$qqrx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@GetTranslatorNameAndEmail$qqrv
@Gnugettext@TGnuGettextInstance@Getdomain$qqrx20System@UnicodeStringt1t1
@Gnugettext@TGnuGettextInstance@LoadResString$qqrp20System@TResStringRec
@Gnugettext@TGnuGettextInstance@RetranslateComponent$qqrp25System@Classes@TComponentx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@TP_CreateRetranslator$qqrv
@Gnugettext@TGnuGettextInstance@TP_GlobalHandleClass$qqrp17System@TMetaClassynpqqrp14System@TObject$v
@Gnugettext@TGnuGettextInstance@TP_GlobalIgnoreClass$qqrp17System@TMetaClass
@Gnugettext@TGnuGettextInstance@TP_GlobalIgnoreClassProperty$qqrp17System@TMetaClass20System@UnicodeString
@Gnugettext@TGnuGettextInstance@TP_Ignore$qqrp14System@TObjectx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@TP_IgnoreClass$qqrp17System@TMetaClass
@Gnugettext@TGnuGettextInstance@TP_IgnoreClassProperty$qqrp17System@TMetaClass20System@UnicodeString
@Gnugettext@TGnuGettextInstance@TranslateComponent$qqrp25System@Classes@TComponentx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@TranslateProperties$qqrp14System@TObject20System@UnicodeString
@Gnugettext@TGnuGettextInstance@TranslateProperty$qqrp14System@TObjectp24System@Typinfo@TPropInfop23System@Classes@TStringsx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@TranslateStrings$qqrp23System@Classes@TStringsx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@UseLanguage$qqr20System@UnicodeString
@Gnugettext@TGnuGettextInstance@WhenNewDomain$qqrx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@WhenNewDomainDirectory$qqrx20System@UnicodeStringt1
@Gnugettext@TGnuGettextInstance@WhenNewLanguage$qqrx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@bindtextdomain$qqrx20System@UnicodeStringt1
@Gnugettext@TGnuGettextInstance@bindtextdomainToFile$qqrx20System@UnicodeStringt1
@Gnugettext@TGnuGettextInstance@dgettext$qqrx20System@UnicodeStringt1
@Gnugettext@TGnuGettextInstance@dngettext$qqrx20System@UnicodeStringt1t1i
@Gnugettext@TGnuGettextInstance@getcurrenttextdomain$qqrv
@Gnugettext@TGnuGettextInstance@gettext$qqrx20System@UnicodeString
@Gnugettext@TGnuGettextInstance@ngettext$qqrx20System@UnicodeStringt1i
@Gnugettext@TGnuGettextInstance@textdomain$qqrx20System@UnicodeString
@Gnugettext@TMoFile@
@Gnugettext@TMoFile@$bctr$qqr20System@UnicodeStringjj
@Gnugettext@TMoFile@$bdtr$qqrv
@Gnugettext@TMoFile@CardinalInMem$qqrpcui
@Gnugettext@TMoFile@autoswap32$qqrui
@Gnugettext@TMoFile@gettext$qqrx31System@%AnsiStringT$us$i65535$%ro
@Gnugettext@TP_GlobalHandleClass$qqrp17System@TMetaClassynpqqrp14System@TObject$v
@Gnugettext@TP_GlobalIgnoreClass$qqrp17System@TMetaClass
@Gnugettext@TP_GlobalIgnoreClassProperty$qqrp17System@TMetaClassx20System@UnicodeString
@Gnugettext@TP_Ignore$qqrp14System@TObjectx20System@UnicodeString
@Gnugettext@TP_IgnoreClass$qqrp17System@TMetaClass
@Gnugettext@TP_IgnoreClassProperty$qqrp17System@TMetaClassx20System@UnicodeString
@Gnugettext@TranslateComponent$qqrp25System@Classes@TComponentx20System@UnicodeString
@Gnugettext@UseLanguage$qqr20System@UnicodeString
@Gnugettext@_$qqrx20System@UnicodeString
@Gnugettext@bindtextdomain$qqrx20System@UnicodeStringt1
@Gnugettext@dgettext$qqrx20System@UnicodeStringt1
@Gnugettext@dngettext$qqrx20System@UnicodeStringt1t1i
@Gnugettext@getcurrenttextdomain$qqrv
@Gnugettext@gettext$qqrx20System@UnicodeString
@Gnugettext@initialization$qqrv
@Gnugettext@ngettext$qqrx20System@UnicodeStringt1i
@Gnugettext@textdomain$qqrx20System@UnicodeString
_MainForm
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ