Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
47d7a16783f06b37a6f638a1ac316902_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47d7a16783f06b37a6f638a1ac316902_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
47d7a16783f06b37a6f638a1ac316902_JaffaCakes118
Size
77KB
MD5
47d7a16783f06b37a6f638a1ac316902
SHA1
416ed6f028a4515d5f719d3a42304ebdc009b2cf
SHA256
0c81b9d377163888b8a9e66cfc979bb601faf321c2e55c1e4d031aff04b8f42e
SHA512
f2df215a2a750fcf5061190755cca1ae6be7d9be2be29634acb9a1f3ddebbc5a5ef73de862334ee786b16c75e392080231dae18bdec5704ba7b69c426a2fdf84
SSDEEP
1536:i9OFuwRvmDvyBGPZE7Gi9q4epmKEbM0lFyKrJFe6iOgJngxbZA:i0uumbykC+pm4SyKdFeQ4nCZA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ