Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
mcinst.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
mcinst.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
upgrade.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
upgrade.exe
Resource
win10v2004-20241007-en
Target
2bb8c797cfeb03502d4d7cb9a6fe4a56_JaffaCakes118
Size
203KB
MD5
2bb8c797cfeb03502d4d7cb9a6fe4a56
SHA1
1cbe6b9acf82c39cf11c1d2de7a8adb3bf0311e9
SHA256
e861ca5eca6e3cfe88740079620eb6947a46af83143dd54e17829896dc7699ac
SHA512
3e9675f19ba80562f8e4b54dbb41851b7fcb5ceba5f7fae77e70c4f5954673afda475b50927997dee77bc6c7bf1142e7b3358d3c123c965fece62c98ac6d8bf3
SSDEEP
3072:zm5FkZ0UlMsV77wJ/ZZJLEysK49b1D25JwZwZ09e/dWoLHGOhMQsw3sEMnORJAHD:KYvlvaLEysLOwZwseVZHGYbW+Aj
Checks for missing Authenticode signature.
resource |
---|
unpack001/upgrade.exe |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
e:\BuildSystem\Node\MCINST220_6330393732065.Build\build\Win32\Release\mcinst.pdb
WinVerifyTrust
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetModuleFileNameA
WaitForSingleObject
CreateMutexA
MoveFileA
FindFirstFileA
GetTempPathA
WriteFile
ReadFile
GetFileSize
GetWindowsDirectoryA
WideCharToMultiByte
GetShortPathNameW
CopyFileW
GetTempFileNameW
MoveFileExW
SetFileAttributesW
GetVersionExW
RemoveDirectoryW
FindNextFileW
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
MultiByteToWideChar
GetLocalTime
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
GetSystemDirectoryA
EnterCriticalSection
LocalAlloc
FindNextFileA
SearchPathA
lstrlenW
ResumeThread
SuspendThread
GetCurrentProcess
SetPriorityClass
GetThreadTimes
SetThreadPriority
GetCurrentThread
lstrcmpiA
CreateThread
DuplicateHandle
CreateEventA
LocalFree
SetEvent
GetCurrentProcessId
CopyFileA
GetExitCodeProcess
CreateProcessA
GetSystemInfo
ExpandEnvironmentStringsA
SetFileAttributesA
GetFileAttributesA
GetTempFileNameA
CreateDirectoryA
GlobalFree
GlobalAlloc
lstrcpynA
MoveFileExA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetLastError
IsBadReadPtr
SystemTimeToFileTime
GetStringTypeA
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetStdHandle
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
GetPrivateProfileSectionNamesA
GetProcessHeap
HeapAlloc
GetPrivateProfileSectionA
lstrlenA
HeapFree
GetLongPathNameA
DeleteFileA
ReleaseMutex
RemoveDirectoryA
GetShortPathNameA
WritePrivateProfileStringA
CreateFileA
SetFilePointer
FlushFileBuffers
CloseHandle
FindFirstFileW
GetLastError
FindClose
GetFileAttributesW
LoadLibraryA
GetProcAddress
GetThreadLocale
GetLocaleInfoA
GetACP
FreeLibrary
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
InterlockedExchange
WriteConsoleW
GetCurrentThreadId
TlsFree
GetConsoleMode
GetConsoleCP
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetCPInfo
GetStartupInfoA
GetCommandLineA
HeapDestroy
HeapReAlloc
HeapSize
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
SetEnvironmentVariableA
GetModuleHandleA
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
VirtualQuery
GetStringTypeW
LoadStringA
PostThreadMessageA
RegisterClassA
CreateWindowExA
SetWindowRgn
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
CharNextA
wsprintfA
RegQueryInfoKeyA
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegCreateKeyA
LockServiceDatabase
ChangeServiceConfigA
UnlockServiceDatabase
ControlService
QueryServiceConfig2A
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ChangeServiceConfig2A
RegEnumKeyExA
GetSecurityDescriptorControl
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegDeleteValueA
EnumServicesStatusExA
QueryServiceConfigA
CreateServiceA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
RegEnumValueA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
SHGetFolderPathA
CoUninitialize
CoCreateGuid
CoInitialize
CoTaskMemFree
StringFromCLSID
SysFreeString
SysAllocStringLen
SysAllocString
PathAppendA
SHDeleteValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
EnableScrollBar
DrawTextA
DrawStateA
DrawMenuBar
DrawIcon
DispatchMessageA
DestroyMenu
DestroyCursor
DefDlgProcA
CreateIcon
CreateDialogParamA
CreateDialogIndirectParamA
CreateCursor
CreateAcceleratorTableA
CharToOemA
CharNextA
EnterCriticalSection
lstrcatA
VirtualAlloc
UnmapViewOfFile
TlsSetValue
TlsFree
SetLastError
RtlUnwind
OpenFile
LoadLibraryA
InitializeCriticalSection
GetPrivateProfileStringA
GetLocalTime
FreeResource
ExitThread
EnumResourceLanguagesA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE