Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
1a1a36722ff9e7c1177123b7fdb9755d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a1a36722ff9e7c1177123b7fdb9755d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
1a1a36722ff9e7c1177123b7fdb9755d_JaffaCakes118
Size
733KB
MD5
1a1a36722ff9e7c1177123b7fdb9755d
SHA1
4b85b7e2dbb017d7f994fbfbe6d3c13aededa7df
SHA256
742b7e0543f58f3c8ccb65b99326ce8c5eb737b77144e28380bd6a7ec8328c90
SHA512
387ba9af2d75cfa0f66f12972316489c12373da18f5ca73403ecce981f3cdf30cef4a60d2932f7020c0e7830bfd104d9f77e27fba7ec2d0faf1332a054085488
SSDEEP
12288:g2lM4m5TnnXLMYEVFMPSiiMiw7FT7f8tN3bFOpt8c7J8Q29CAapNGuvi33Zs9k9x:g2Wd5LXgFVFMPSpDGNG3JOpKix5i33Zv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ