Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
078e80da19bab461dee0bf73b7fb580e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
078e80da19bab461dee0bf73b7fb580e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
078e80da19bab461dee0bf73b7fb580e_JaffaCakes118
Size
236KB
MD5
078e80da19bab461dee0bf73b7fb580e
SHA1
7f1af5cbda3df200f48cf108d2161c70c93e1bfd
SHA256
7e64266b8db5fe102fc66556d54624d96564e4295ecf94f1585db0c4c066b1b5
SHA512
4565524adee130c235c65252523bf9b0acbcb550a55baedd9fad5049814c0a324015f9ee745d95cd1845f1fbaca23aaf8bee46e32cd7967d8d46e14551972dee
SSDEEP
3072:xlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsCGpnS83pJQXKPNf:a3kOMeaavF17EP6qyqsYeiKPpP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ