Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
38c8d98844303e568a757e325e20657c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38c8d98844303e568a757e325e20657c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
38c8d98844303e568a757e325e20657c_JaffaCakes118
Size
21KB
MD5
38c8d98844303e568a757e325e20657c
SHA1
51a6833bffd3934cf5351ac7e8ea22fe02a3e8c5
SHA256
1093b627d831f83a2fb04d6988b21d9c3c7046326feae2cfe24928c1a8fef6a2
SHA512
97bb25d0cef183b61dac318d808dff3cd7f6990aafc641d7d168cbae04c6859a2bf788f5238f8fc4355965a50f69ef21c6d6aa0cf4b736468d3a6a11e1205735
SSDEEP
192:BzdZnP8wFyk4QC7ClP3qnjOlnzFwD8y3H/vRc4png0ku7S9YRILwQ4ISr9ZCspEs:Bz7FyzGanjOleFJ3pngLDzd4IreM4my
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE