Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
c86125cb91f5622fc6bff9989a796a96.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c86125cb91f5622fc6bff9989a796a96.exe
Resource
win10v2004-20240226-en
Target
c86125cb91f5622fc6bff9989a796a96
Size
13KB
MD5
c86125cb91f5622fc6bff9989a796a96
SHA1
2b03fa1394feb25da6a383adbb35a9df920c0d20
SHA256
1245d960171109810cc53856c4e28d02a7b3b1b33e70fa6d88a044e8fce01c7f
SHA512
da201e62110290ee8f7cbcc703ef44400e0545040765da77f4d4319d9024cd6583acee8bb7b16f8c82a3a78703b368ee971f023cea8b467b54c727a5c0367fe9
SSDEEP
192:Lq5POEuXky9UAMG5Twv7E6xjhwLhr9ZCspE+TMwrRmK+vhOrc:4uXkymAMCo7NELUeM4mB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ