Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
6300d96799933b19e1972b5df3396f70_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6300d96799933b19e1972b5df3396f70_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6300d96799933b19e1972b5df3396f70_JaffaCakes118
Size
13KB
MD5
6300d96799933b19e1972b5df3396f70
SHA1
ff7195a30f898d1570db1a46fc03ab2a52d4b750
SHA256
9c247361d718692d6b893b614fd33c564e508d8f21d0e08e7983f0ef3e1c4f5b
SHA512
6afaf0849d0eee2a2650ead43450668900102450997deecdbcd4c7dc581e76c7ffbcc8d2fa04e5f10d4a7edc1fdac4c20d1967eac4e10c75f6af194e9809dc46
SSDEEP
192:44gbgkAN4SfIKEuHGLUwv7E6ccH5M9r9ZCspE+TMwrRmK+vhOrA:44uI4TvumX7NrZVeM4md
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ