Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
ce9e1c15ccb590371dde3cbe4f24e60d_JaffaCakes118.exe
Resource
win7-20240903-en
Target
ce9e1c15ccb590371dde3cbe4f24e60d_JaffaCakes118
Size
190KB
MD5
ce9e1c15ccb590371dde3cbe4f24e60d
SHA1
3282e1c360ad78e02d82cc812998e6e4ef5f1e10
SHA256
783251e242f9ceb7c0c4154cc0d423fd90d91a8f9dba6846b91d0863d696ab4f
SHA512
d0a7066cd43e70e2dfba9640f53f702ea316fcff4ccd09e284637c0557b618dbb579dfc0a25e790dd9ac3fce1f96c636e2c815e09ad8b3d9a5c16bfa0b3fcce0
SSDEEP
3072:nugDneTwc9lb/ErB2U50v4wpevs2s4jlzu47vVqS8Zd5VTeE1TpWp2Pgoy:1hc99/ErMUGv4wkLs4jxuwqS8RheE1Te
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ