Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
08c1b1c4c8ef48008aa25c9847bdcc15_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
08c1b1c4c8ef48008aa25c9847bdcc15_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
08c1b1c4c8ef48008aa25c9847bdcc15_JaffaCakes118
Size
228KB
MD5
08c1b1c4c8ef48008aa25c9847bdcc15
SHA1
e5dec4423e99797316d89ce2d33f57dc8a5a011f
SHA256
1d72b5fce05546135cf001a81e194352afd429de98a032444790df68800194be
SHA512
9f3cf08ee1dd3fbe3cecd07fe6fedd5d8d6b1dc5f8e3fe19d1880d9aa6e739b6f272032ec6bd8debe5a3df95e50a5231908a1f1742fb17679b47fc03c84ad70b
SSDEEP
6144:q4Q9x2N2h74vSmC/eakYkJ9afR+9ge1LisQOcNeSD8W2Zk5B3EM6:rQn+vSbkYkqfRNe1LiN/bok5B0M6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ