Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
01b7fa5a86eb97721a2d6348e5490e9b_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
01b7fa5a86eb97721a2d6348e5490e9b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
01b7fa5a86eb97721a2d6348e5490e9b_JaffaCakes118
Size
234KB
MD5
01b7fa5a86eb97721a2d6348e5490e9b
SHA1
ca5c7752a83df6f5109b041025dca77ee33976b0
SHA256
ed4929d4d102c5d5264e1013548e7be1ef2ca19cbf1aaf4213c7a95122923418
SHA512
9c6f72f7e93b914e7b1408585a137a92302345587408ddb3ab61f45bbdbf6393dc88fe45fcf6c4af592f4b4f79c06f3176de8cfbdb8ed9d9cc56c20066982a9c
SSDEEP
6144:J7Gf5yIQg+gTTB2hPqkb9EPTqdLhiKUjZBEuohW3vwt:g5l50tTCPTqG7toE3vwt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ