Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
3969a421f5b6d66896be6365539e05cb_JaffaCakes118.exe
Resource
win7-20240903-en
Target
3969a421f5b6d66896be6365539e05cb_JaffaCakes118
Size
88KB
MD5
3969a421f5b6d66896be6365539e05cb
SHA1
35f85971a492bd43f723732ac584163ad6ccf5a8
SHA256
1a29bce14366174a10850933e1b14aaf93d21a89c1afdc114d7246f70904707c
SHA512
62bfab5515e15770cd661f6bb2ac4da65f355935daa77ae270f43959bf393feb4bdf8ea7e7b2cdad9fe39da4bd9bb238f927f9f07072aae9224e6d2d3920fad5
SSDEEP
1536:u0ZkV23sTWotKch9KERxbTwTM20E3Axj+/N2bPK6TGOiu2EzGIpcK4TB0P5d3Ew0:uWaTtrh9KEHYP3AxjC2bPCUGICTB0P3o
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ