Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f93573922c511c493d10683beac2ba75_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f93573922c511c493d10683beac2ba75_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f93573922c511c493d10683beac2ba75_JaffaCakes118
Size
229KB
MD5
f93573922c511c493d10683beac2ba75
SHA1
550befc68c34082e1a4b7a832c0ca958fa4cd11c
SHA256
659c21377fe0542e80c61a5ced2690e63cd6162036dccfeeb2d18cf77d709c2a
SHA512
3c0d070b69630a5e732c3d03e2a29b49f5d3e3c999d7da96c4ba55d419fcf27614a2921d8ae866b80348b1d0c1f0e12d4bcd28312215867b2ddc74ff38c75ad9
SSDEEP
6144:PXvh35/MfsELOfjZVd3beAZWaXc3VsOWBK+w3eB:PXR5/M0ELOV7L3QFsW+wu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ