Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
2dd5b079e56d8e64f8eeb76e9e4970fb_JaffaCakes118.exe
Resource
win7-20240903-en
Target
2dd5b079e56d8e64f8eeb76e9e4970fb_JaffaCakes118
Size
666KB
MD5
2dd5b079e56d8e64f8eeb76e9e4970fb
SHA1
0ecb464a4204b5137fabb957ed2c2c2f9536b52e
SHA256
1b7e1fd21dcb23b8e8487c6a429cbbe37abd6b3f7b9627d71a833d93b3dfbe53
SHA512
633edcbab0b16a8a476c34f24e9271f5c518ca5a306d516df0a97ddffb8004fdec8cbaa76f76730b1cbd0232c096535113f59b42ed6d8d30b1e3e05f32c53961
SSDEEP
12288:q6Wq4aaE6KwyF5L0Y2D1PqLH2DyUqMhaAmRSvRSdXfQ3kSb0YT:IthEVaPqLH2DaMaqUYqY
AutoIT scripts compiled to PE executables.
resource | yara_rule |
---|---|
static1/unpack001/out.upx | autoit_exe |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ