Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
e6185c6020fb24a0d296ae6dcef6a141_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e6185c6020fb24a0d296ae6dcef6a141_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
e6185c6020fb24a0d296ae6dcef6a141_JaffaCakes118
Size
321KB
MD5
e6185c6020fb24a0d296ae6dcef6a141
SHA1
725c3cff1af86ddefff377ccb7e560cae769c671
SHA256
47c8656db4c4f545f617ae5f0d41b8b530beb9ddf0df2bcad09f7d2b50a8de53
SHA512
0a267d5fa2344f460ca5de87d245e93f6c889d15c18a11fcd9135695646a5f6574afb997e44e0823a2d1bc1fdfe6648a00fbd91f6a3fae41a575f06607a7dda0
SSDEEP
6144:t+9m2P7CqfAh8EfNiApv9TFLBykEG2XH4nrgUfe1/qYUro6eDO9y38:LCgh8EfMAR9fykEnX4rgjRj6Ko7
| resource | yara_rule |
|---|---|
| sample | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ