Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Polazert_with_cert.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Polazert_with_cert.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Polazert_without_cert.exe
Resource
win7-20240419-en
Target
2.rar
Size
517KB
MD5
2dd4679c7dfd3376d0bc13fab974873e
SHA1
2a96702e97cfd9d1b596a13586932f75b72bff86
SHA256
3d00b02c0eea697a210017a42aa7a4877d8bdb47eba87fa61ebe6daf10c85618
SHA512
09069fd537ea513a4e3920efab0ad60e8feed22764e4deab2fbd5676d480b1318449e4dad4e07f1d76ad629fd3f3ea082a97a8ae3d2dc3af6f3bca53b99a2fe9
SSDEEP
12288:o3RBgLHuJSEnHBVrKy4D0PmSrRiP3QxfH/uU8eGJ0PKBVZKp7LyZOvUJ:ABgiJSEnHDriDQmgRc3QxgDJ0PKPZwAJ
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/Polazert_without_cert.exe.vir |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ