Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d6889a4922d43defbfaf86b79a30f370.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6889a4922d43defbfaf86b79a30f370.exe
Resource
win10v2004-20240226-en
Target
d6889a4922d43defbfaf86b79a30f370
Size
316KB
MD5
d6889a4922d43defbfaf86b79a30f370
SHA1
172f9a0f48cb51873f59e123923e482dd9e8bca8
SHA256
8dfe2b79419fe6dbd9d26f9101ae387099e567f081aa4b45a1c047beee2c7d37
SHA512
8042815ba30fb094a36b1ccf8cfb28c2d6dfc2aa5cfd7a69fa81cafd83aa23cb6e99c5c2a785f2d00d83b7cccc1060e0f91f722a5594cbf7d0bc9f254639746f
SSDEEP
6144:iJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hp4pz5WDB9f3EuMfUzKFpiZ/qJ9IKP:i42vRlPsBvmxzC/GQVp4JmvEuMfUzW64
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ