Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
de18e36de48831519073d53087fed63b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
de18e36de48831519073d53087fed63b.exe
Resource
win10v2004-20240226-en
Target
de18e36de48831519073d53087fed63b
Size
242KB
MD5
de18e36de48831519073d53087fed63b
SHA1
72bcbfd3ddee2095ecf12ef9f5e505c0d8ca4d95
SHA256
2fbff9a8e2ca06826c80df74b0d93a881f8a2a7ec44f44ac0b62fd6eb75e3cd0
SHA512
06399260f4b3ac573db6b2b000716d239672b0d23c7f8c88de7f8ae5b017456879a5c7c40b853bf5d9da1e288a8ea1c14e58f9a98d9a8ec13fc9f9d9db2ce553
SSDEEP
6144:OkeENDvTSn2SV/GuhYdViC7X57+nMFTzB0BqrT+XfZ:ONEND/k/GLPX57+nGmS+vZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ