Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f9a8c9977ff5f028cdba0d994b859499_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f9a8c9977ff5f028cdba0d994b859499_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f9a8c9977ff5f028cdba0d994b859499_JaffaCakes118
Size
202KB
MD5
f9a8c9977ff5f028cdba0d994b859499
SHA1
8e135a9e88ba51e116fbf29f4a6206659a10bd3c
SHA256
748ec92d4e8d61f9891410aec5715d8df23a96fa3a168930de2fd23f40a46ed4
SHA512
656db374073f965c5d39ab59f92d76c1d6ec06dbdf3ce0bcb71623db01d825fac842846f926ea288527e0dcae67d58a2ae5392112ed78e5e1090afd262155bde
SSDEEP
3072:glSoK8GofoglxTGeXUnAe30APKDAze6NOY2iowfl88KjxkO64GwfcLVR5x+tI3WW:/ooofNrtEAGiDu5ohDTfKH+tI3WG5
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ