Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
34661d46a301033fa8e6100695df4f57_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34661d46a301033fa8e6100695df4f57_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
34661d46a301033fa8e6100695df4f57_JaffaCakes118
Size
11KB
MD5
34661d46a301033fa8e6100695df4f57
SHA1
3af68f1d8baaa90476c1f8b4874482ae5705f306
SHA256
508f572d67772e1269a37761366453b5996009d18c70426182d6e198c00a7b8f
SHA512
b0b117ed6aef8ed4c2db95d366c22d9583161d0f0fa4657954bc379eef4b9a0e00d2bd4341dcc313a8d6dcf028b0440d1cd14cc56e8089f8efe6eb7837534c75
SSDEEP
192:HAE59NYRGDHNH6uQ6oHPk9TEMb58yA4r9ZCspE+TMwrRmK+vhOr7:gG9NuGrJ6ug8ZEI58yAeM4my
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ