Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
01616aa0b72ca8055d0b9d1844f5a149.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
01616aa0b72ca8055d0b9d1844f5a149.exe
Resource
win10v2004-20240226-en
Target
01616aa0b72ca8055d0b9d1844f5a149.bin
Size
1.4MB
MD5
01616aa0b72ca8055d0b9d1844f5a149
SHA1
05051fdce54f4362c048c109397784c091a2c775
SHA256
cd0cbfbd46671eba0781b94ed274b870876624e6cc9b2107dfa271bd7e5af69d
SHA512
f6e9a7f5e4c2ef8c052ce84d1f26261dd1e918387a8558d667e58c553988bc5bbce2c4a3b893c0ef8293c93675677aa801d7c0b61f295a2fef70defc5fa904f5
SSDEEP
24576:E8PXhrbkCQLO/dhKcOQMvWrqKQPUUmLy/YV7lfomdM0jKhfzf2zC0fFFp0GhQO:pfxkjLOPKNQMuJQPELy/c7lQ2MmWfzeN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ