Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
c5ef72e254082089e6ad3cf49c934cf2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5ef72e254082089e6ad3cf49c934cf2.exe
Resource
win10v2004-20240226-en
Target
c5ef72e254082089e6ad3cf49c934cf2
Size
201KB
MD5
c5ef72e254082089e6ad3cf49c934cf2
SHA1
83fb49e5ae43a36d45b58f56a66a286e92020332
SHA256
98c378e54ca14cc71bdb9d53e81b5a362e5cf376ba7bb4050eb3e43415f473ec
SHA512
31915a950f70168cae3b7309deeca766b6a4c390504dbe727a2fc54ac0dcd0558288d8b1f97e934ca2467305252079df12905a07d0c60ac89d729c82b99fe09c
SSDEEP
3072:HF6uHgUCMahqqhHBot5SqLgoxxWSjXYMbz4mg5mHoSmO3nW62ITO2d:HF6OYhHBoLZXYMXymIS7mP2d
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ