Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
558956dfa5ee1590ee671347923bd311_JaffaCakes118.exe
Resource
win7-20240903-en
Target
558956dfa5ee1590ee671347923bd311_JaffaCakes118
Size
5KB
MD5
558956dfa5ee1590ee671347923bd311
SHA1
f29cfdab8426d87684b137a812bcb44642159bf9
SHA256
5a29be9350215da0c8ccdbca1fac67239f5822f43c8899e72867b67f25376b7e
SHA512
b05c2fdf6a6cd6034da16a87e048a75d531803f3f68bad5fa2469257b0b71a4b7c59d396f9f7c25bf9af2add05dd6e149f20bc7b9319be38b0a7511d7b5ea81a
SSDEEP
48:ij5zStSYqteXQ8X0nesILWlPPpAdIheIwcDjWu4yxcSeJY8JTaZjwOZVvBvgzzWP:Ckgk/sILtIwC3BnvBgz6FHcS0ev1z6Bi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE