Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
0937f37c86e1442f2fd8b22d8ff92f3f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0937f37c86e1442f2fd8b22d8ff92f3f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0937f37c86e1442f2fd8b22d8ff92f3f_JaffaCakes118
Size
14KB
MD5
0937f37c86e1442f2fd8b22d8ff92f3f
SHA1
7270fcbcb30cbdab152a6d0426ad02f9e3c100ba
SHA256
cad99e51016517a18956924911091c9ced25bd89b0ffd095bdde5c9bc19357ef
SHA512
80d98f8761b9dadd5203c18b668dec622267f59d578a072db9e45c9c03ae284201185c9d797f5b0e740287d884990120f451b5a2be2d081940cd2c9053545269
SSDEEP
192:DZDHSJ4IhIlFri2+Xsdz5ezISQRd00q6gpOkG/FWbmfbBU8RZa553SZ7dAB50C:DVyJ5hIFt+i50ISQg0ccFWSfO87E1ZEC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ