Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
f76e755bdc0e8c12f1d399c5d30ab505_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f76e755bdc0e8c12f1d399c5d30ab505_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f76e755bdc0e8c12f1d399c5d30ab505_JaffaCakes118
Size
13KB
MD5
f76e755bdc0e8c12f1d399c5d30ab505
SHA1
8673ae490d100814e7981d00e683cd016245bd26
SHA256
f81653fceb515ea793ba41c8c09d0151c4a9196516c0a4e45ec8607ae1bac441
SHA512
b8ee9d21eaadd4643fa2f56d84f4b11badd0317df8bb48a0b5d5343cb3cf3adef4140a4af5bca82fe85a1ed633a75fb389856224389a2e166bee8c21e7a91523
SSDEEP
192:LvOeihIaivohlwv7E6iU5NbKr9ZCspE+TMwrRmK+vhOr4o9xd:5aivB7Nx/jeM4m1Mxd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ