Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d9a790d221ce35e4b4896b2f7b9adf76_JaffaCakes118.exe
Resource
win7-20240704-en
Target
d9a790d221ce35e4b4896b2f7b9adf76_JaffaCakes118
Size
373KB
MD5
d9a790d221ce35e4b4896b2f7b9adf76
SHA1
12542a555718bfc7584eb32aef69c645b9e1ac3c
SHA256
25bccffe2dd5d0786c153cf97bf6a7be1e39825479fb2466875051bd65526556
SHA512
3768f91b536cb94ae54b66aaad7f486ade46bdb1bfae1381e2b9dc2cb92f24bc271d4030cdc4334146787982f094d9fb7f7fcf18ef3850cf9e5de42d65ab4a05
SSDEEP
6144:/fxjxvjpe238JMJRMVkvkcyc65DECBe2UQB343iTYOGQKnOfadwwX:/fnbsJiRQf9VnBe2U8ISUZQBCdvX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ