Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
bd449294ad3be116444b556c1372f169_JaffaCakes118.exe
Resource
win7-20240705-en
Target
bd449294ad3be116444b556c1372f169_JaffaCakes118
Size
389KB
MD5
bd449294ad3be116444b556c1372f169
SHA1
ce50f021339f2be4deb24c9f2fc808243fb1daee
SHA256
4a47e0c4429c6472c013a2ffe7356a8d8afdbac6928eb9c1c4674d6242db349d
SHA512
8aa5e1ad2a2cd6fffc9011008400ff15d6fb9c41b402e6b06b23bf99ab5a3b9361c7dced38a970caa5167b2056b7177bc5bc0286a956770b4deaaff92ab4b0ea
SSDEEP
6144:3fxjxvjpe238JMJRMVkvkcyc65DECBe2UQB343iTYOGQKnO+Zyn:3fnbsJiRQf9VnBe2U8ISUZQB+q
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ