Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
4b1999aa6d0f061bbf6bea06a7cb68c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b1999aa6d0f061bbf6bea06a7cb68c7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4b1999aa6d0f061bbf6bea06a7cb68c7_JaffaCakes118
Size
13KB
MD5
4b1999aa6d0f061bbf6bea06a7cb68c7
SHA1
f518d576f8da6c5ca647d13e6e1ba17c3130d1cd
SHA256
aed07c1b424f031ab314cb9f6c090962b132283f7bbc0facc567bc51f71e85e1
SHA512
907be73ed2209048e374eddeda9f9f7b27c3b4447d3077bbc41958b3a3ddd162fad74d5f8a97d88facd449b35da3c03a2fe2f01cdc945f999572e337cadb7e92
SSDEEP
192:Lu5POEuXky9UAMG5Twv7E6/0lN6Lcr9ZCspE+TMwrRmK+vhOrzZ4:0uXkymAMCo7NegLNeM4mmZ4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ