Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e9ab092b3e87afbc1da4acc8e1945c58_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9ab092b3e87afbc1da4acc8e1945c58_JaffaCakes118.exe
Resource
win10v2004-20240319-en
Target
e9ab092b3e87afbc1da4acc8e1945c58_JaffaCakes118
Size
198KB
MD5
e9ab092b3e87afbc1da4acc8e1945c58
SHA1
8140d1520c9535f319ae47f5b66c1449d349f92b
SHA256
d0ad9f2fed9a2acefb08cf9c81e73c239cc19087517b56a7b1d2489ba8c49f76
SHA512
9e0cb20e5d6150344ab1b126d4807a3a7819cba7e7e2190c6d7c4be8cf62072cb7aacd12ae88b1ead2f238a22b2ea3e79800631b1f3d70fadf5f516afc7afad8
SSDEEP
6144:RFH2w7eJotYp0WBlkAgZiRULxwUJfALZn89+JneCo:RHYotudoiRU1wUJfIa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ