Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
5df585d9bf5b23fa8438e79a5d8d3fa8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5df585d9bf5b23fa8438e79a5d8d3fa8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5df585d9bf5b23fa8438e79a5d8d3fa8_JaffaCakes118
Size
17KB
MD5
5df585d9bf5b23fa8438e79a5d8d3fa8
SHA1
d307a9de3f382bd786da2140a3b32b7a8fe22969
SHA256
1afeaf43e8e6e5bd6a1b3789ffe28bc3019279cfd0631c3143a294fb746e52c5
SHA512
c7a5f8d2006c819a3c7f6095040e8c1f15927fa502f4a0845a2853ab0882da0ad5ee8b400e105ed2177a09b6e01023fdb5956e9be0f58073a03f71a77783032b
SSDEEP
192:H68xrsKGIpLFqUQCKAzpZTPR60hNhbfaJLyiiZhcwmrr9ZCspE+TMwrRmK+vhOrT:HnxRhxeCdC+bfaJLyiAOwZeM4mvq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ