Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
43dc5870d9192c626e62fa5d3e367895_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43dc5870d9192c626e62fa5d3e367895_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
43dc5870d9192c626e62fa5d3e367895_JaffaCakes118
Size
13KB
MD5
43dc5870d9192c626e62fa5d3e367895
SHA1
67c98f2e03edce8e8b32ed0de688d6e13a37489a
SHA256
77c7b00d444cc30e96795de12cd664253dcbefed10eae6731ef974ead8e946df
SHA512
eeb638a18a4de70f53ebddb155b98e6dd6ea90c971a92c75654c5627580aef39d7c297cfb49924a42eccba947686f4232c8f94e752201a821fe1a6f04df67225
SSDEEP
192:LYovIe9jdGSHlmK+Zpb82aQOhGcSBr9ZCspE+TMwrRmK+vhOrJ6hwK:b9jLmfba9hbBeM4mdx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ