Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
94749bad87ef95017415a47e54c16b52_JaffaCakes118.exe
Resource
win7-20240704-en
Target
94749bad87ef95017415a47e54c16b52_JaffaCakes118
Size
394KB
MD5
94749bad87ef95017415a47e54c16b52
SHA1
8375924082a54751b965e92c67032d71a7261ec7
SHA256
613e2469c6daf77154be37fd2481fff0360738bb7e57ff89c91df73d5cad8219
SHA512
64fdff01d10cfdabbd8c45bbf8ffb990e2b3b594c723763a54d8c641070304e45d59805dcb4ddf4fcd338acd40cc6c14434ebd0ddd85c3bd11c119a1bf0bea45
SSDEEP
12288:WjkArEN249AyE/rbaMct4bO2/VaelaJqX6vibG:hFE//Tct4bOsweQO4iC
resource | yara_rule |
---|---|
sample | upx |
AutoIT scripts compiled to PE executables.
resource | yara_rule |
---|---|
static1/unpack001/out.upx | autoit_exe |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ