Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
07d6d7a76d59c4274053e6d98847a3d5_JaffaCakes118.exe
Resource
win7-20240903-en
Target
07d6d7a76d59c4274053e6d98847a3d5_JaffaCakes118
Size
88KB
MD5
07d6d7a76d59c4274053e6d98847a3d5
SHA1
fed417ebd86a3066081306b82b3e7acc8f54cc8d
SHA256
ca69df92e4079eede96b8014f808aed0ca5c9283eeeb9071e112404e0f6fbc37
SHA512
378c0bd2d2adc8f6441034f025ac07cc333a09c7ebeaa63fc377795c36a9c01b0066e99ab808f860cb8583d084d0cc814c126578eee3e31886cb94af8e5657e2
SSDEEP
1536:F0ZkV23sTWotKch9KERxbTCzVfBRhEOmUO7FSCxQMIVRYCFzfkuaOOjfx7Vds:FWaTtrh9KEHUfBRKU8FS0QMIzfFZaBT2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ