Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
552c661ac0387e2625932d3e0f9ebebd_JaffaCakes118.exe
Resource
win7-20240708-en
Target
552c661ac0387e2625932d3e0f9ebebd_JaffaCakes118
Size
88KB
MD5
552c661ac0387e2625932d3e0f9ebebd
SHA1
0a9ae977f0f1a8b31b9fb5ddf84d7c71947662e4
SHA256
cf4a791ff0a304145100628682579bfc9aa909f5d82c90c6f9117b9b94c3486e
SHA512
328773e0451c109066467839d6a891c6629328bec4a708db5e6ceee723d261d70638ede17e4252c2c178c27c81d445b2c6c9803588218529ca2d1cc4c71cadc5
SSDEEP
1536:z0ZkV23sTWotKch9KERxbTcnxP4Xxnis2J/mXp49+LXTKjH9ORKTbIKjVdC:zWaTtrh9KEHiFCis2J/5AzTxKTFBdC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ