Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
c0b98574dca196dfe0702ff95bfca5bf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0b98574dca196dfe0702ff95bfca5bf.exe
Resource
win10v2004-20240226-en
Target
c0b98574dca196dfe0702ff95bfca5bf
Size
234KB
MD5
c0b98574dca196dfe0702ff95bfca5bf
SHA1
7229e0c94f0fb6c317a8f96f699998393a78256e
SHA256
5b5f9db518ceb6af474ae69d854002229badecbc60caf0ebdc905ed258e32225
SHA512
2d515fb9ee22df9bdc6be6d2d59f3572112cd9a28e7a06928139bffaef3a2a02e0b5d116e96e35b12318cb9647932785b733e56e735825abe262eea2b92d0f13
SSDEEP
6144:jB3rOrdrnyJwpmW+wfdQTjfRP7J5udVYlhA7jpY9VFs32UTmr:j9OrNyJwpmafdQ/5V5ufY/uNY9432Uyr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ