Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
df14a961f713fdf37757540beba9959e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
df14a961f713fdf37757540beba9959e.exe
Resource
win10v2004-20240226-en
Target
df14a961f713fdf37757540beba9959e
Size
236KB
MD5
df14a961f713fdf37757540beba9959e
SHA1
1cb60e7406de4c7977a11c2925a25fc8f4f08bc8
SHA256
7e520112ad1dd2d5710885d7f19b8d2b75533a06cb41ddcbfdf8ca59afb75e72
SHA512
393b5a5105a1bdb2bfeddf3079c5c4fb7d886621a3aff22a0dfeb2bf7ad9704b6d65a3ae1d198c43e2bd8d0631d849104a1a07fe0173ac420637be11579746f6
SSDEEP
6144:403XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBHybWuKiL0W:4c1udnLSg03ymK2Ilm1F4a4kAiunL0W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ