Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
18232e2aedc099a29e01009b5b88420e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
18232e2aedc099a29e01009b5b88420e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
18232e2aedc099a29e01009b5b88420e_JaffaCakes118
Size
13KB
MD5
18232e2aedc099a29e01009b5b88420e
SHA1
dab5420062ba9bd683608691b0984a57e4be496d
SHA256
2bfe443968ea09b3cd011c4828538a69fd98751f97501fa8d08ee421e4430a5b
SHA512
57acc096bf12cdc34a051ae97bcdef963ecba669d5e10908f4f3ab71babe2d85a6f680cce82daf7be4aa4e135f2653fb7b3e6093d6e1e4361a38c3d5a3e7fd81
SSDEEP
192:OS4gbgkAN4SJj+bfrJsUwv7E6Gf1Hr9ZCspE+TMwrRmK+vhOrwcF:OS4uI44aJ+7NGfAeM4mE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ