Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
16334417291c09a47a0bc989fb91e4b1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16334417291c09a47a0bc989fb91e4b1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
16334417291c09a47a0bc989fb91e4b1_JaffaCakes118
Size
13KB
MD5
16334417291c09a47a0bc989fb91e4b1
SHA1
753a511b048a9fd8176c58059cb200b7c13e0956
SHA256
9d9935addaed018a7858b3e0409e3fafa818e7136d6d0a253ad1d490c0922206
SHA512
9c25e6097feaa1205eeaac0fd6b846ea2d2b65d4024254e5f4a8ad9b3c20b271bc8f7b52f031fafa0d6778de6808fe545cb7854823f40b4da691d6fdef760c2c
SSDEEP
192:Lx+9dBH9j/sAac4aVSxjQen27LDlLEQR2r9ZCspE+TMwrRmK+vhOrl:Kzac4aVSxkr7HlLEQRveM4mk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ