Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
c4a48c70c8742db7fad1b6006c034313.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4a48c70c8742db7fad1b6006c034313.exe
Resource
win10v2004-20240226-en
Target
c4a48c70c8742db7fad1b6006c034313
Size
202KB
MD5
c4a48c70c8742db7fad1b6006c034313
SHA1
12f25976193ec0977f2a1990dc41f88d65d2ad89
SHA256
f94e5dcb90467d753cd487e941bbbadad1d32e43a8c5e45df27de1c3b6b5e898
SHA512
b5606e85a41397b577ad3efb9ee49e71b7b0702c978a1a1b768547f26a3c70da1e5341369c7db060e41cb672dc8cc13645d72f39fc8477955cd9ba9e8605bd83
SSDEEP
6144:Xt+W7cJrbe+cSgisn7agK9S5yULFSbQAe:QWAiSbaWgK9S5y3bPe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ