Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
3892d50550093b13837c71b733eff15c_JaffaCakes118.exe
Resource
win7-20241010-en
Target
3892d50550093b13837c71b733eff15c_JaffaCakes118
Size
88KB
MD5
3892d50550093b13837c71b733eff15c
SHA1
42f1e7a336005d369e81b64b2ae1d9a19008106e
SHA256
ae50a0e53efdb6b33a5fc460250ac1f8be5b38ae526db955e24a65d535a4918d
SHA512
8bc31967c6ec28e8c18010131a3132d6385a18e2811d0bb28bd52ded64ffac21201eb81481a7d665c6ffac7d82502e6a059f54b7a99914168d7c10c916e40d41
SSDEEP
1536:30ZkV23sTWotKch9KERxbTbuzVfBRhEOmUO7FSCxQMIVRYCFzfkuaOOjfxvVdR:3WaTtrh9KEHsfBRKU8FS0QMIzfFZaBTz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ