Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
46399079c9ef0ea7a53576e358dfd69e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
46399079c9ef0ea7a53576e358dfd69e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
46399079c9ef0ea7a53576e358dfd69e_JaffaCakes118
Size
13KB
MD5
46399079c9ef0ea7a53576e358dfd69e
SHA1
e55d888f8d11f587acd2e89d680395aab7b63ed5
SHA256
14e060af9b607b2c5eb2d08e109e443f7d49fd320283a8987822513af40f77e2
SHA512
2dd8d621df7f9975ac23bac3a429264dc711e164f8596fc2da336a6c1acaa1677aa459846054388eab287bdde2bbada93126b871240afb16be797745d6bbc0a6
SSDEEP
192:WQ41KJ38ry7ytTEwv7E6XheBtr9ZCspE+TMwrRmK+vhOrS:WQ41KB+t/7NyAeM4mr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ