Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
d98ba14ec148f18e46633681647b08d6_JaffaCakes118.exe
Resource
win7-20240903-en
Target
d98ba14ec148f18e46633681647b08d6_JaffaCakes118
Size
196KB
MD5
d98ba14ec148f18e46633681647b08d6
SHA1
77452795781f944c137d411eaf05a74f7656f539
SHA256
b4df845c817285876e1bf1fe235c2a61db59430089056f840ce5005aab4eb20a
SHA512
2b397ae79c43bf070494039affab53d58d0f522b558f539c31284cdad2783c3e071f0c0c590218148402ddc1b395729e94c7fa534641d5be6bde353f8b65251c
SSDEEP
3072:NRQRmawkVyhLNO37TLaSJOzKkbR2C6HndOVZ10n39RDlZDRHOU1MBEreE1/Oyzik:YRmawJK7fzut2lgi3nDlZVHOU/F/qMX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ