Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f00566138e4b49827a78e052861ebd26_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f00566138e4b49827a78e052861ebd26_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f00566138e4b49827a78e052861ebd26_JaffaCakes118
Size
237KB
MD5
f00566138e4b49827a78e052861ebd26
SHA1
d12743ff63f9e6488cfb6240873c9b522de6aaaf
SHA256
08a3d814070504c4416fe0e0639ef818cb2cce3ffe5f704b09f81025de7afc89
SHA512
b22b7c7039c3d21974d59ddfa9a067cd6ad2fd6942a8f9d5f87a6709f65d2034bae6ac3fc9e42b3c1017e0b516ede8127a778dd631ec8fe6dfcee74098e0353e
SSDEEP
3072:NlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqs5oC6IxsHZQGt28:m3kOMeaavF17EP6qyqs576GsHZA8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ