Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
09760c90b38c50faa34d27947b88a556_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
09760c90b38c50faa34d27947b88a556_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
09760c90b38c50faa34d27947b88a556_JaffaCakes118
Size
897KB
MD5
09760c90b38c50faa34d27947b88a556
SHA1
47d12d47401eeeb07eccad48340751f6872b41b6
SHA256
1412a5437c670bbb34f68cb6113af9f0980d2ec8e00bc011a4f7ca5461ca01cd
SHA512
d79ea6edda1205d12af02a566651039fe76bc6b931ec1d8db4b35f157601960366e9c79c1d1f7b23ccecd1f402efb1f4f2d2411599d01665b9d81d81cda75090
SSDEEP
12288:Fl8MdhuJy9Z1ARjpQ4kvoCHCr21oUQAh5UcyHBWGktXE46SAjKvHWDialK6+oUdD:Fl8MdwyzXHvH0cuBytmVD7K6+pdCfWb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ