Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
f070c1773dd78fc60839ac6d4788c464_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f070c1773dd78fc60839ac6d4788c464_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f070c1773dd78fc60839ac6d4788c464_JaffaCakes118
Size
163KB
MD5
f070c1773dd78fc60839ac6d4788c464
SHA1
632a1a50e6d482af0cad4d6f02afcc84dbf775e6
SHA256
0139f2fef4fa3bb0880d9350a8d29dea435fea4979df6737c454edf71d334dc4
SHA512
6c22e896526e891cedd64c17ba3e8baa0a4e3748a3e3751aae020630f5165331730cab9469fc61177590ec0b0a6dd4a744f04f112dd7fca66daffaca184499ab
SSDEEP
3072:H7CwwBvtrGzz2OhLpXqeAWcMbFppzBoKAuag+h1d0/kL:b0dtrOiOhlXqCl5pH4h1d0i
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ