Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
410ff480b3b5ed637c94af6d8da73b69_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
410ff480b3b5ed637c94af6d8da73b69_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
410ff480b3b5ed637c94af6d8da73b69_JaffaCakes118
Size
206KB
MD5
410ff480b3b5ed637c94af6d8da73b69
SHA1
7887569b5a97bef0ea95e6892bfd4848dc5de0f1
SHA256
6fa82a7ee74723328ba9622e3f64f748c0e255d951416fa4fdf380205273af4c
SHA512
c59494df8f45e5cba0ca476d3efb097a8c191ee53efd918523a70ff97d4c8da0712500836815d6464fa683dd165d853289237958f1fe7b95eb6c929154b4e542
SSDEEP
6144:+jUxSJbhdZ1lKhqNu0ddFsBxsEJ1MLfDsnYf+nef:+jUxGbhzLKcumdkx7190+nef
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ