Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
efdd25f231cdf3eaae4e8aef35659e48_JaffaCakes118.exe
Resource
win7-20240708-en
Target
efdd25f231cdf3eaae4e8aef35659e48_JaffaCakes118
Size
1.4MB
MD5
efdd25f231cdf3eaae4e8aef35659e48
SHA1
298c66b829e996bfd5791656d6ed72ed92bab0d1
SHA256
f12e163f436cee6a8de15e69eea342ca39769fb0694e6c3bf2039ef37b82bf9e
SHA512
1cfb69fe202f9f9a44738dfd9545582e5084dcf5e8513468e190c3288b410c6b42795ff5c2dd21460a3dd67086ce98eee89f497eaaadfc9ef1aa55bacca77d3f
SSDEEP
24576:Z8PXhrbkCQLO/dhKcOQMvWrqKQPUUmLy/YU7lfomdM0jKhfzf2zC0fFFp0Ght:SfxkjLOPKNQMuJQPELy/N7lQ2MmWfzej
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ