Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f6acd2e303e62a44fc15ec879626c2db_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f6acd2e303e62a44fc15ec879626c2db_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f6acd2e303e62a44fc15ec879626c2db_JaffaCakes118
Size
236KB
MD5
f6acd2e303e62a44fc15ec879626c2db
SHA1
9003304ae0b5c231c35d53550b90f9aae2e09ca7
SHA256
6bc7341ab250050bac14d18a41c757f6e6c23981331b98d386f659c4e85b0e59
SHA512
be2bf6ec852f1adc38f69d9e2aecca10134801c3cb0716f76b72ecbc3ba61f8cf3e406459366f0ec911560f03b16f539c2e7c21126f5922fc51af0d608fdb86b
SSDEEP
6144:T03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncByf4cmZfLBNtPWP:Tc1udnLSg03ymK2Ilm1F4a4kofsf8P
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ