Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
038dd7cdfd33e1ad119241fc675406f4_JaffaCakes118.exe
Resource
win7-20240903-en
Target
038dd7cdfd33e1ad119241fc675406f4_JaffaCakes118
Size
5KB
MD5
038dd7cdfd33e1ad119241fc675406f4
SHA1
e1c02854f66fb6a3c10039f42c26218ce5ed49ea
SHA256
e5631cc8dc1288dd6017157ef996f61928a8791fdd3bfe41eccaab3507536c6a
SHA512
477ba0af159b55a09488db0cebcfb2e60e582f605de060f22f3ee6ae7cdc6628012e076ce054e6feb3e09bc17b3891523e2c0d2084d113207126c27906b6cd43
SSDEEP
48:i2bzStiYqteXQ8X0nesILWlPPplIheIwcDjWuNyxcSeJY8JTaZjwOZVvBvyzzWFh:HkQk/sILoIwZ3BnvByz6FHcS0ev1z6s
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE