Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
04b238f83a9a54e369644f51f846e7567042ad666a47fb09b0e89f5facb2e4d2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04b238f83a9a54e369644f51f846e7567042ad666a47fb09b0e89f5facb2e4d2.exe
Resource
win10v2004-20240226-en
Target
04b238f83a9a54e369644f51f846e7567042ad666a47fb09b0e89f5facb2e4d2
Size
900KB
MD5
5ce939c092e1c7144247d6374fc518d6
SHA1
531dfd3f0b0d49465ec817a0c3261ef445956f24
SHA256
04b238f83a9a54e369644f51f846e7567042ad666a47fb09b0e89f5facb2e4d2
SHA512
31e8a8524084a771647fa63a1c59989b170ee72772308d59561c5fe90fc392e674f37eeaa4a693caff496c4a967c82ae3fb7259a875cde2dbfa27eb67a215e12
SSDEEP
24576:BdcvGletz11DmeoctJacoE4T/uHeoILWNqaLuXds:G591Z2cKcdAuHe9WnLuq
resource | yara_rule |
---|---|
sample | UPX |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ