Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
155d4267eab12f823ab0e7c16172a9ac_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
155d4267eab12f823ab0e7c16172a9ac_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
155d4267eab12f823ab0e7c16172a9ac_JaffaCakes118
Size
12KB
MD5
155d4267eab12f823ab0e7c16172a9ac
SHA1
9b3239c83a5263564be547eaa839722be9a2e1ad
SHA256
9b3f9f54b3f7ceee40b2d9ee71a7d9cfbfbcf3ef93134e0c7b791f80fb15dc52
SHA512
0efeda463cfb594b11f1ac02f064f863a14d4b480b41e848c51feaa773ffd03075c3a87bb4ff19fe295705a2293ee7a2c0589a41fd106d1340b92138041ebf1e
SSDEEP
192:BGG+U5EIlqEiZs8KhKDtcqJUWCVqRi3LssDUVVJySv50pUcJEA6ruBXGEwv6wj7y:BGDUWIlqV6hKI3B3Fmzyw5WHjEuBXGJk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE