Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
d5e4cff477d05f056903c2e8fc7a758e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5e4cff477d05f056903c2e8fc7a758e.exe
Resource
win10v2004-20240226-en
Target
d5e4cff477d05f056903c2e8fc7a758e
Size
13KB
MD5
d5e4cff477d05f056903c2e8fc7a758e
SHA1
3e8c016ae18adcae96f9d84c0f86ff3fe75f9eaa
SHA256
f95731852af6e3b2a07e83d72d14329cefe7c3d57ae7315666081bacd018fa3a
SHA512
ca347e177d28c6d3bd3c910ced7e2b780bef3202a0b317e4f7d87e12be5bae8437b39058cc42837894ce11f4158f9d52577726f3340e1996124bf5548ae57ef8
SSDEEP
192:OS4gbgkAN4SJj+bfrJsUwv7E6tBuIhpEr9ZCspE+TMwrRmK+vhOrx/y28z:OS4uI44aJ+7NtMIFeM4mu/+z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ