Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
44ecdebaba68cfa2cdee6fbcf7e38f0d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44ecdebaba68cfa2cdee6fbcf7e38f0d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
44ecdebaba68cfa2cdee6fbcf7e38f0d_JaffaCakes118
Size
13KB
MD5
44ecdebaba68cfa2cdee6fbcf7e38f0d
SHA1
e7dffd7efc39e1d973ba8a9cc96ae9bd80e1cd92
SHA256
be9956638a835a3ebe36a25101b136ba5a12e4ce44684ad834408c6fed7dfe43
SHA512
48d467a268735d8c8388b98d29fdce9364cc73bbef929e939fe32c2a557864b3a95a9020c439b5ae70f4bf7e58dae876cd335c3da2f63f7342a96a86c15ec9d7
SSDEEP
192:Lxy9dBH9j/sAac4aVSxjQen27LD53r9ZCspE+TMwrRmK+vhOrW:2zac4aVSxkr7H5SeM4mj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ