Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
386c2f71e3faa2f2c00f27d45e20b1b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
386c2f71e3faa2f2c00f27d45e20b1b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
386c2f71e3faa2f2c00f27d45e20b1b8_JaffaCakes118
Size
88KB
MD5
386c2f71e3faa2f2c00f27d45e20b1b8
SHA1
bb9669386ec8a34de1168ecc95b92bcbd90ff207
SHA256
bfaff67697c0cd8230d7b9a9a3bb0eeee343a10d0bee8ef10b23752022ea8e30
SHA512
bae52b3f8b6fcd02ed0eafb09d63b312221b51b73bcaa6ce12da09e2442c9d73ea5d3b199800e8f074af3e1fd84606e55f52595b2b92b544994b13b314a01be4
SSDEEP
1536:l0ZkV23sTWotKch9KERxbTbnWB+oGV8Wqgu09Vbi40J//o4V+WwVdH:lWaTtrh9KEHY+oGV8tgu09YdY3dH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ