Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
ca12f74181852bacac73afdf88354855.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca12f74181852bacac73afdf88354855.exe
Resource
win10v2004-20240226-en
Target
ca12f74181852bacac73afdf88354855
Size
193KB
MD5
ca12f74181852bacac73afdf88354855
SHA1
3d99a82e894f7fc05a9afffb6b733ba16c6ba69f
SHA256
b8a233af73c143beb377dcd9c0d9d7d699a75d89564fd27f5a18f13e9415c15b
SHA512
d5600a7e548480d4b3ef45068f215f27479d444e22c75a2f77e552bf1f88c37c8e72744a8f90daa8b5fda6dea1c6e1155d41fed7f3bb6afb892e8b6cb1b45239
SSDEEP
3072:kVKhO5Bb0S69IWtqVJoB9Iu0B0A3p1HYKE8/FgtC3FzFitB4OaQxbg8tAG:bc5NW3d6H4ViFgU3ZA/HJxbrtAG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ