Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
060a76a6f4620461441c3abbd98ca75f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
060a76a6f4620461441c3abbd98ca75f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
060a76a6f4620461441c3abbd98ca75f_JaffaCakes118
Size
236KB
MD5
060a76a6f4620461441c3abbd98ca75f
SHA1
f28e59db037d66c69ef55b617dc970704004a6ae
SHA256
ab89a4629d61ae30a93e0af1bbf5f5eee881acd45ae0cc5a95fa3a9ffc10887d
SHA512
92d789ae9966c903c0c3c1333637d042cab7dab4080523b517d0f901dcf38e4a7bedb390de5cb6653bf405574c3f0cddbc30f47c54eda3f74d4cef7d8e458280
SSDEEP
6144:Y03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBsNEs0ab/:Yc1udnLSg03ymK2Ilm1F4a4k+Esp/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ