Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3e6ccd18e4c73a47788808a13edf414283cd929976e64b8900e3b50b2a3429c3N.exe
Resource
win11-20240802-en
Target
3e6ccd18e4c73a47788808a13edf414283cd929976e64b8900e3b50b2a3429c3N
Size
1.5MB
MD5
391c9e6772aaabdf4ba72676f257a510
SHA1
dfd29eca965d42b4a53476bfc551db21314b2721
SHA256
3e6ccd18e4c73a47788808a13edf414283cd929976e64b8900e3b50b2a3429c3
SHA512
7acb16c3361d34b63b1e711090867bebe8c5b1a491a7a809b46b6c6f6e8d6f4c4575eb7128e1b6394e56be9e38327e0552e3dd4149d9204897b887a86bbac7ba
SSDEEP
24576:+q5TfcdHj4fmb22qOjzKJ9Ttrd0IT7fify/jdfcFzQJ9TtFM6VRAjdMgF:+UTsamixd5Vjd75+jdF
AutoIT scripts compiled to PE executables.
resource | yara_rule |
---|---|
static1/unpack001/out.upx | autoit_exe |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ