Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
2d4cad1f9487d91ad197c0bdc57acb60_JaffaCakes118.exe
Resource
win7-20240903-en
Target
2d4cad1f9487d91ad197c0bdc57acb60_JaffaCakes118
Size
13KB
MD5
2d4cad1f9487d91ad197c0bdc57acb60
SHA1
a4e64e529a2d859d82cc39377bfd43e43df682e4
SHA256
c03953442bf35d00a0c6f396067572fcb305c526ff478611a0eed95fde85750f
SHA512
dd7f57f29309fad3c40dcd0903caa73e03c93115b078ccbcadb2d65331bdbd14db016b3b3cda35a4d5735d41d8e6345bd5b359a1632e4830a3a20836ba39e284
SSDEEP
192:FwxmWUors/vhC1JbYN76C/umbN3Ds75d3LYfdHxyAEyncjWOo6n/CWvYI/V:FSa01J4Gos70tnB6/CWvV/V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ