Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0822857bb134b832010ec3ffab1a15db_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0822857bb134b832010ec3ffab1a15db_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
0822857bb134b832010ec3ffab1a15db_JaffaCakes118
Size
1.4MB
MD5
0822857bb134b832010ec3ffab1a15db
SHA1
f45edec7f29ce307a695c0edda1c2830da516374
SHA256
38a6ede122744b4c234bb2ec5a496cbaa6000d6c151ae4e3bd686faf4b63960e
SHA512
23f040b80e04078cb7bdef237cb8a936ce56d832a124f4b8c1454a67ff19eea84bb1faea31c76ad3b9401c86d3a7eb321af002ac904171d110a94bcddca04344
SSDEEP
24576:e8PXhrbkCQLO/dhKcOQMvWrqKQPUUmLy/Yy7lfomdM0jKhfzf2zC0fFFp0Ghi:vfxkjLOPKNQMuJQPELy/P7lQ2MmWfzeU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ