Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
fc833bf26a3c90f319a7f29a3ee54ac7_JaffaCakes118.exe
Resource
win7-20240903-en
Target
fc833bf26a3c90f319a7f29a3ee54ac7_JaffaCakes118
Size
198KB
MD5
fc833bf26a3c90f319a7f29a3ee54ac7
SHA1
26ee0ff687d7fd4521a1ea7f0d8e46c490b8718c
SHA256
7911cf03da7ba98c98d76730441c378a32daa0f12f7ba8b121d0db9ccf4920b3
SHA512
91ad98fea6765608a7350ee6e1cbfcb1ca9cd8851d2d3810cc2d3d910e04e4723783a67e4bb7a596c7e7ea96c8d5aa334ab67984b8424ad76854135c76198aba
SSDEEP
6144:QjWq7chPrO02BNnqLqoHMkrxX87Ltgg6ab/5:QjN+jO1BNnqLlt5itggBT5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ