Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
643fb14906ce5c5bb897979f41ae3217_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
643fb14906ce5c5bb897979f41ae3217_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
643fb14906ce5c5bb897979f41ae3217_JaffaCakes118
Size
13KB
MD5
643fb14906ce5c5bb897979f41ae3217
SHA1
763f4659d9805e42e0908f21e9c2979bd76505f5
SHA256
bdb8a0a19d338a1830877a3ce8b1bcc5c9ca3c161915940ef48a9486d949c523
SHA512
649e32e1af19287fb5ed1303bf6405cf6ec577d410c096dc27d31421f97d32bca9f904bfb2e9d65a5879bc1be1bda43b1d40a0509e36bdc10e8e59c4be8c9fca
SSDEEP
192:Lxp/COzVmK5y1Lv+lwv7E6gvdUSr9ZCspE+TMwrRmK+vhOrwhq3A:TaiE1Lvx7NgvKeM4m1iA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ