Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
c63f9b02e9d9e6eeac5a8b7305e0dd71.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c63f9b02e9d9e6eeac5a8b7305e0dd71.exe
Resource
win10v2004-20240226-en
Target
c63f9b02e9d9e6eeac5a8b7305e0dd71
Size
55KB
MD5
c63f9b02e9d9e6eeac5a8b7305e0dd71
SHA1
9f0e203188f674ab08f4c8d200212f7f44576c67
SHA256
cfe00307bb34a7390aebc79c8c75bf0b269012996135947887935176e60fd6c3
SHA512
195b1f1bbec7c294b6c488e053111bdef31a1325ac262014c4d3200432b06f8898c2abbd2c5940bfd71fce16ca4714184d5ab61ba64e799df7bdae6faf98190d
SSDEEP
1536:hNGJ9sNB/Y5W5EGl0p1xUCroYoNZ0aHtfPn:hUJ9snZ5EG+Hxh8Yo/N3n
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ