Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
140a865a53500ab1549fd366e1d05a50N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
140a865a53500ab1549fd366e1d05a50N.dll
Resource
win10v2004-20240709-en
Target
140a865a53500ab1549fd366e1d05a50N.exe
Size
35KB
MD5
140a865a53500ab1549fd366e1d05a50
SHA1
0379daa1597336f36bebf8215d89e32652952641
SHA256
e9d4e7f4b2df802c216cb7c72c352d0abe8466d8b7cd5d4be3cb005e832cb8c9
SHA512
83c40d43592be26e5b41ac0583f2e4204053ce08b7ee3b3bac6f4d736d9d45bbc0e3980e9666c9f03e492d5b1da4108ec12be0373bf221efe423e9c62bec0064
SSDEEP
768:x8kt3aO0Cvg0bJBT4aL10OUIK0VDoGzjQrBr6yrHk0DGR8:xBKOFvg0bJxLGOPZDouSKi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
main
mainA
mainW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ