Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
84ceb4b4e62dad7bfdee47faf2a7953d_JaffaCakes118.exe
Resource
win7-20240708-en
Target
84ceb4b4e62dad7bfdee47faf2a7953d_JaffaCakes118
Size
815KB
MD5
84ceb4b4e62dad7bfdee47faf2a7953d
SHA1
9dd1be62e4278f5c1d1b9a1ff02ac075a64af6ac
SHA256
b48fc8987c42c3d31331fae080dfae69ce945fdecb10d4fb540108e38e91ffe1
SHA512
c86dc986ef743c3be8e170c62650dab6561116b26c1a67f65ddb6415136701c2082261dffba9dc193a5f025f05ee5b3b23c10e1e3e454185a3dd7d8781728bda
SSDEEP
24576:hFE//Tct4bOsweQOeZJTOWVxa/yvPy86SAe+JOoa:TSVreZJCWVQiPy868Ia
resource | yara_rule |
---|---|
sample | upx |
AutoIT scripts compiled to PE executables.
resource | yara_rule |
---|---|
static1/unpack001/out.upx | autoit_exe |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ