Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
18a6e2d148bc36126ceceac108ce4a0a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
18a6e2d148bc36126ceceac108ce4a0a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
18a6e2d148bc36126ceceac108ce4a0a_JaffaCakes118
Size
17KB
MD5
18a6e2d148bc36126ceceac108ce4a0a
SHA1
9d45493bf7a10e5e74218f169dc26d26cca4c13b
SHA256
32fb8024e8fcccdf4c56432d7632deba6dfe7ecc05ffaeead2c4bc835065b412
SHA512
2e216faf854f63c4a88216bb3e148d143544bc051b2200cc6dd608d5bc6000f0c95561d4927f90bb433e97d7b3af8627f9904f26a71032e6e2d97f62eb02d838
SSDEEP
192:H68xrsKGIpLFqUQCKAzpZTPR60hNhbfaJLhPFwr9ZCspE+TMwrRmK+vhOr2WV:HnxRhxeCdC+bfaJLhPHeM4m7WV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ