Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
0cab8b07eb4f8012dbbf57c9c2c353f1_JaffaCakes118.exe
Resource
win7-20240729-en
Target
0cab8b07eb4f8012dbbf57c9c2c353f1_JaffaCakes118
Size
13KB
MD5
0cab8b07eb4f8012dbbf57c9c2c353f1
SHA1
4a186380829d321e95d7efb4d6cd814d6909e72c
SHA256
f4325ef242e4f39b3a1a5eca8e174fba40fdd9af37e320442b726a145a166112
SHA512
b34e7511ab23a855c0176bb80e7eecdf3234c314d67263d3357b2ecb0cb8235438fb968248d3a85523f9d68a7c2ab93abed5db8a9740c7c000918efa5130ae7d
SSDEEP
192:vwxmWUors/vhC1JbYDT1k/8jZD6umYmVnCaZbf0eHxyAEyncjWOr6n/CWvYI2H:vSa01J8T1k0NDZgnCy0knW6/CWvV4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ