Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d5d364af45c6b3896f75fa1bb45ad145.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5d364af45c6b3896f75fa1bb45ad145.exe
Resource
win10v2004-20240226-en
Target
d5d364af45c6b3896f75fa1bb45ad145
Size
198KB
MD5
d5d364af45c6b3896f75fa1bb45ad145
SHA1
84e1cdf07388dd6f1c85793f753e099bc9b1ee8e
SHA256
c65fb9073fccbd3f6ef6b2c3969c32271bec85731e5dbf96fb589835372b1c74
SHA512
883df34f7ba8d066dc81677914fbf99f69395a3edf6c2bb0fefb16362f30b2d731553fde64578969622626232d0ea7518a36380e822d4ecc9e55b2a6e05c0910
SSDEEP
3072:lxSG6JufSm3qBJmiDuVIXnRrQjoILywfOyo7/IyHLrjCUddic:HqWSmaBkiDmJoILdGyo7/IyHjC2dF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ