Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bf1791b2f654b8a71dec7bcaf0dbcaee.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bf1791b2f654b8a71dec7bcaf0dbcaee.exe
Resource
win10v2004-20240226-en
Target
bf1791b2f654b8a71dec7bcaf0dbcaee
Size
234KB
MD5
bf1791b2f654b8a71dec7bcaf0dbcaee
SHA1
5ba01e935a7c8ac3a5552542de9c1f944fe0401d
SHA256
e75b51c33f8f151d928e2fc1dded4363f366fb2dbd9e8444ab5f18ffde492c25
SHA512
84468aff8c24a380364ef536c49fc4e5841b8e76953c80510471dd883baaad6d026937c4b16d66ca6602a13f3c64cb69549742e5ef4da754e83673b8aa7d68ac
SSDEEP
6144:h5hGwM+cg0JY5WYPSLOAdIMUT47NJlUT4uWJ:h5AwM+j8YPOzdIMC47NJlChWJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ