Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
14f7cfe4ba53b2f14ae06ff90697af32_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14f7cfe4ba53b2f14ae06ff90697af32_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
14f7cfe4ba53b2f14ae06ff90697af32_JaffaCakes118
Size
13KB
MD5
14f7cfe4ba53b2f14ae06ff90697af32
SHA1
19d0641b9663d7d620dbc20d45044e6b7011c2bd
SHA256
acaf1f0b78dd37c148419f6aab5668cbc175e4729d8661ce2bc1a855d28b5e79
SHA512
1695b9070d06eda621373955584b9512723d5f8f07596b35c91bb070919a6ede436f1cad4addaadb141ef1151cac48f522f68179b234f6cae5f1f47dbecb25a0
SSDEEP
192:E4gbgkAN4SfIKEuHGLUwv7E6ziPCeyI6Kr9ZCspE+TMwrRmK+vhOrklBBE:E4uI4TvumX7NziPhyI+eM4m1lB+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ