Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
ec394d8056a6ac7bbb014444334400fc_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ec394d8056a6ac7bbb014444334400fc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
ec394d8056a6ac7bbb014444334400fc_JaffaCakes118
Size
88KB
MD5
ec394d8056a6ac7bbb014444334400fc
SHA1
d42d8d5dc5af9641c5b8af8a2cba98ad571eb7cc
SHA256
b94717c475e3b3aafead6baa3ed503c41c149c8c38b0546c5a4cffa903b86a56
SHA512
1e55ed555d6e4640cc4e8f688c1efa5d65fd38916bae1a6a8b5cc8d912d12c371a1ce551bf3e320ba0d250f1859448af8a067ec6082a1431e27eb614848d1e65
SSDEEP
1536:l0ZkV23sTWotKch9KERxbTb2U1EPe1lyIcPp9FnaXZBXZBrXOg6FLs2dBWVdI:lWaTtrh9KEHOU1EPuyIcRDafJB28dI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ