Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
ceb84e33e42f5b48e0ec6b33c7878ec1e8b4f4f3c36ed388436c523c97faa9a4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ceb84e33e42f5b48e0ec6b33c7878ec1e8b4f4f3c36ed388436c523c97faa9a4.dll
Resource
win10v2004-20240226-en
Target
ceb84e33e42f5b48e0ec6b33c7878ec1e8b4f4f3c36ed388436c523c97faa9a4
Size
582KB
MD5
9437df726a17e0b2e5d4557ea1c45de8
SHA1
2cee7608c23cbbabac44613b4f059f9185728451
SHA256
ceb84e33e42f5b48e0ec6b33c7878ec1e8b4f4f3c36ed388436c523c97faa9a4
SHA512
f53c8277c21a7925dbd282b85981960ab766319c56af8e2bfbbea6f6fa8edf5f27e319d14ddcbfc7dbae4387c1100159c7202c1bfd4385ba6004857700b3ca88
SSDEEP
12288:Z8sZhcVJlF4hVPDNaUzcUZHpjabOBZqPndWJLni8bgmsbT/GU/7BAiQ:OCcZFGpJHIOBUUDzRsvuU/7OiQ
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CPlApplet
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ