Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
b193310b51d09bf079f8bbebf91d03c0_JaffaCakes118.exe
Resource
win7-20240708-en
Target
b193310b51d09bf079f8bbebf91d03c0_JaffaCakes118
Size
88KB
MD5
b193310b51d09bf079f8bbebf91d03c0
SHA1
6c74ab9406de949b0d7c1a92d6d8a6a63c971fdd
SHA256
f5e4f80057c284e9422e33a2e6ea47c9429fd87a62b012af64c74ebfecfaf1ee
SHA512
aa4f30359d6be2f1905bb5adb5050bd0062b965cc90aa02d9fcd7cfd9df47c993dd0112a6f78b0ce0ff888f52d88d62dce2d9e660644c81c01709f1311bb4aff
SSDEEP
1536:M0ZkV23sTWotKch9KERxbTbw5TYKKEAExtwGZSU0SDbwZpIn3VAq6md+bEVdD:MWaTtrh9KEHouKTlXSU0XZOYmdrdD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ