Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
cd6d3c5ad8d5104b738b4c27e634d834.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd6d3c5ad8d5104b738b4c27e634d834.exe
Resource
win10v2004-20240226-en
Target
cd6d3c5ad8d5104b738b4c27e634d834
Size
13KB
MD5
cd6d3c5ad8d5104b738b4c27e634d834
SHA1
2499d716c2e86d50b77629d74241532a9eb74457
SHA256
a4aaeca3529266affb9bc1f166278c078b48bb198b20067e987dfbc8071b5cf1
SHA512
f934a8ce9c4bce6f13d2cb3c1872068d096939edca9b6a4688d860c2f3c0d706cc9a192423fa71b8797f4dcefbd67839076274bf1cf308c2b7b9cf33fc8e06db
SSDEEP
192:L25POEuXky9WA0d33vg5Twv7E6vZncr9ZCspE+TMwrRmK+vhOrmX:kuXkylCn4o7NvRNeM4mR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ