Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ed8ef7fee1c316d61b6b3b6ec4104543_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ed8ef7fee1c316d61b6b3b6ec4104543_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
ed8ef7fee1c316d61b6b3b6ec4104543_JaffaCakes118
Size
228KB
MD5
ed8ef7fee1c316d61b6b3b6ec4104543
SHA1
5e2bf6bd0bcf2d40a54ef290986e061a41671a73
SHA256
08a1e417978468728177dfae5682ea4a689a6af72f86b15605a5164f6ef66a9c
SHA512
f80c4b6f8d3ed5400cac8f69da9747d0d34a958b7adfc4f9aac51ed810b1cb046fb2f6be19e354e3637c879f7e4abc0b837d5f07a9e84ad44cf36e373e743b6e
SSDEEP
6144:i4Q9x2N2h74vSmC/eakYkJ9afR+9ge1LisQOcNeSPWOwjBbo:zQn+vSbkYkqfRNe1LiN/beF8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ