Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
24a57afeff4d9e1ac42a5816cafc4309_JaffaCakes118.exe
Resource
win7-20240221-en
Target
24a57afeff4d9e1ac42a5816cafc4309_JaffaCakes118
Size
36KB
MD5
24a57afeff4d9e1ac42a5816cafc4309
SHA1
4b11af0f6ed035b8e2e87a14c9308db776ccbfb1
SHA256
41677b4836b477de7130fb4e21f40ac0683848c59a5484b2a3ba5803803955eb
SHA512
d99028df2ef962c02e67b3e3979e78bb95c4655055131f85015ad2c2685ed1208394c0d0286f90e4d3e2a1794fe59abc21ac971b1c334074293e9de4fd32a427
SSDEEP
768:DDEIXx51xoUknCkXhcr+tqDzFNUPX25nKm1jZl:EIXxfrmVXhcrYsXUv6DL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ