Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
def7af03ebf8579e678bb1b1fd818989.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
def7af03ebf8579e678bb1b1fd818989.exe
Resource
win10v2004-20240226-en
Target
def7af03ebf8579e678bb1b1fd818989
Size
241KB
MD5
def7af03ebf8579e678bb1b1fd818989
SHA1
06d7b17d3726dc7bfc1506c65b7ca69f53e53821
SHA256
03cbb6640a0a03559521aed3c5e777c37d1af0764caf7a94efae3c7d0bcecf42
SHA512
0a3b92c08b1270060e935923ca4c000146a51f9c186328ca96920bf5753cf0c3641b02fedddc3a691f6188c4c5caaadfeca53858216586b7ac4d532c0cf5a2d1
SSDEEP
6144:tkeENDvTSn2SV/GuhYdViC7X57+nMnG2OzdO6B3it:tNEND/k/GLPX57+nIGfY6BSt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ