Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
45f36cf65dfa25161312739a86cf31d4_JaffaCakes118.exe
Resource
win7-20240704-en
Target
45f36cf65dfa25161312739a86cf31d4_JaffaCakes118
Size
36KB
MD5
45f36cf65dfa25161312739a86cf31d4
SHA1
80055acdfc2b66b74f4228f093cff94a758b2c17
SHA256
193e77d4db21307d9a07f0568ac330eb3a1781cf97fc67f824abcc28bffce36a
SHA512
121a0545c51cc988b5ff3c9f1d5bb3efd89337cebc102dfacb7ffb9deadf9cb941b0eca726988bacf16250d5a57052e1db8130e5e241f51e81a8e4d80e530f75
SSDEEP
768:DDEIXx51xoUknCkXhcr+tqDzFNUPX25nKm1jZc:EIXxfrmVXhcrYsXUv6Di
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ