Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0767ba4389fdd1fa65ca977115cbd2f4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0767ba4389fdd1fa65ca977115cbd2f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0767ba4389fdd1fa65ca977115cbd2f4_JaffaCakes118
Size
233KB
MD5
0767ba4389fdd1fa65ca977115cbd2f4
SHA1
81b7c8675553a0647fce7d4a3606a7bb1e00ec4d
SHA256
ac8aa841aa4088732c4b465cb90b9c6221320d284c31c36e22bfeda9e3ed91ff
SHA512
09bcad155d61751f03cf180337a2f9d8d9d9af431a5d98ce892e32400653b2e3dee72e53f3074d0ce67f0ea9a6e918580157936c37039bc3e10d2766ac800d99
SSDEEP
6144:Y7Gf5yIQg+gTTB2hPqkb9EPTqdLhiKUjZBEJFyzD5+9rCyIx:75l50tTCPTqG7GwPwrSx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ