Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
7c96a81144893b21ce191b1367faa640N.exe
Resource
win7-20240708-en
Target
7c96a81144893b21ce191b1367faa640N.exe
Size
374KB
MD5
7c96a81144893b21ce191b1367faa640
SHA1
41fad9badf93f939bd5d6e458f2b81b208a8f18a
SHA256
cbec0370e14a78f3e0226cd851af2776e5c885de0101d98a93b7a7de66ca7e0c
SHA512
545a52e866cabd7a9f5f5a785c31559ab99ea246fc67f6bddd30c2aa4bfa7a255b465086c9be81f56a0d500dff51062578214ecc72d583207c003054dc41a85c
SSDEEP
6144:8ah+TO0g4oZwLk/MX9LuantRPFi0e9pREOqTZyxPTC62LA9rJTqsBrPkopPqX0Rs:8E+O04Zca8RnXFi0e9fAtydT+U9dTfBk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ