Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0b579a5355adb2e456fb3a1dd0475fad_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b579a5355adb2e456fb3a1dd0475fad_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0b579a5355adb2e456fb3a1dd0475fad_JaffaCakes118
Size
119KB
MD5
0b579a5355adb2e456fb3a1dd0475fad
SHA1
e2d857b4c39af1e6ceb2edb3bdaca47d0332c0c9
SHA256
5a339b6d1bc2dab8fee08fc82e6bb78e72d8616b095151014b3f69f9ae054c5d
SHA512
f04ac85e6d778e22fc57c03c240ba97d4484fa70064afb030002ac91330920cf2b2fc00bf29e41922ae82f1cfb64cd65cfb0d1a3dd75fcf8e59a72af5194b955
SSDEEP
3072:9nrc27s6oc+jZo3BB1owDe06O8zPopx6Thy5hredx6NU1xK:trc27sFcu4ZowDe0Uzwpt5hrOiUPK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ