Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e77b0b85c91e225c4b85212502f1af83_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e77b0b85c91e225c4b85212502f1af83_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
e77b0b85c91e225c4b85212502f1af83_JaffaCakes118
Size
241KB
MD5
e77b0b85c91e225c4b85212502f1af83
SHA1
ca355f051806e74473904dabddbd1aafda3f2146
SHA256
87937deca5a05d1668f897bd0e60f39474901e57ca6dc0a1781c5a252c5a5717
SHA512
231ad410ac3d485431db1dc50fb930cd65f5844d1f9e0340679fd8ad33a93d5a52f71a2e85d384cc5ea626db321cdde2fb7fd236cbb50e0d6ca885164bc12515
SSDEEP
6144:vkeENDvTSn2SV/GuhYdViC7X57+nMfH1o/8iNiF6OkeVy/:vNEND/k/GLPX57+ni1oVNiFWJ/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ