Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0b5cc81154455c2316c3a2cc137bc7f1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0b5cc81154455c2316c3a2cc137bc7f1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0b5cc81154455c2316c3a2cc137bc7f1_JaffaCakes118
Size
202KB
MD5
0b5cc81154455c2316c3a2cc137bc7f1
SHA1
e0ea24c43b34f1b9e76ee387a8d3fb007a18542a
SHA256
992087e1b2887b21d91ae4f5b602587066de89f4dc9fe69f3f470fcec4a9202b
SHA512
9a32b830950f387ece094166514afc5464f1f0d94a620e1cc6b038f0bbc8ed8d69f4d65b9318bd5fa836ff5e99e73186a3b2a65280a304bd0612ec79acaaffbb
SSDEEP
6144:30YhjwuTT396HSjGT7UZ5SPzcxt4EzEh6JVI:BhjfTTHBkc4thgVI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ