Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
e9e901e051f43ae7c83fee5b52122ab1_JaffaCakes118.exe
Resource
win7-20240903-en
Target
e9e901e051f43ae7c83fee5b52122ab1_JaffaCakes118
Size
199KB
MD5
e9e901e051f43ae7c83fee5b52122ab1
SHA1
b22b7f00d518cbe3dd67ebb3cbd2cfa1bba50594
SHA256
e9c83989dbb6401dd387267f388c63d2ade2dade618a36272cd7d6ec8223bc93
SHA512
08362dcf1b2a6daa927b86f3def058470520bcc910891145d43572bb72b7aa852f1a2c988596831d8f1a967378e2044fc32af4392c4ab5be4430d7f080d39eaf
SSDEEP
6144:nOymp9JYg+X3Nozpd8dUj3N7+tX+7JXmC58V:nYudCz38dkN7+tXAJXr58V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ