Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f25ae41f24db08a5b9f4aab7469956ba_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f25ae41f24db08a5b9f4aab7469956ba_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f25ae41f24db08a5b9f4aab7469956ba_JaffaCakes118
Size
203KB
MD5
f25ae41f24db08a5b9f4aab7469956ba
SHA1
914d5a1655938c5d24a02e32687f1131b9774679
SHA256
b7d96c7345e0ff6aab6e06dcaaf89b6c632d36fc590d6ef8a8f50b32f17ea6ae
SHA512
bec8b628e0d384024d0c736835cacf94b83f268fa5ee1e07e69896d045b2b78105b31dffd4fe76c6dbe51a345684b233f890c5701a7ec4bacc3778095b181e37
SSDEEP
3072:g3fpmK5FEtmhd2lqlToq3XEMkRBMKqLK9lYCByLC+sSgYX3vGUa+lVfi6Cc6Y4FC:gPf5WUBlTpkaLKsYLyut+lJi5Yp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ