Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
d4606fa6262705cb81b5ab49d7f3a4dd.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d4606fa6262705cb81b5ab49d7f3a4dd.exe
Resource
win10v2004-20231215-en
Target
d4606fa6262705cb81b5ab49d7f3a4dd
Size
180KB
MD5
d4606fa6262705cb81b5ab49d7f3a4dd
SHA1
0eaf7345d362a3c093717d76960cf1731dea8434
SHA256
7df405839d79b5cee56bd63697455f623979fcc2efcd8576b5010bda373353f4
SHA512
659f5847ea33d47495eefb2d461f73f8e07374306a024395e796cb556ecb8d073fdce7b4bcdc77740ef76431e346b04a0a3dd11ad898c09257434205f92f4684
SSDEEP
3072:48/VvUSondhwf6m+jSkDIjLbtcQd6QLlsWrzUnA79+Qu5I0GWDLgqZdYI:jZUSodCft+jShR5d5hBM53HYqZdP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ