Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
09be584e19cfde2d97634a527e64fcd9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09be584e19cfde2d97634a527e64fcd9_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
09be584e19cfde2d97634a527e64fcd9_JaffaCakes118
Size
199KB
MD5
09be584e19cfde2d97634a527e64fcd9
SHA1
03cd96fc7bc2b80e5c475e9e4a1bbfdbc68d3c33
SHA256
417cdf0ddca71507384a5a2d0763666d89ae0d7d16e8f929780fa761891898d6
SHA512
8f3498a68f2d6be9350b978b319fb8b53aa3b23f20788ceda1e7da321bf1ca984d44ab0332863bafc6692f22d8132efab5a6a0c565b17faea8da5207f800fb5b
SSDEEP
3072:Fs5ElXcqzBmM//q2HTCKpuu16GQUvNu/VSGJkBE3dsKSsEEJlloDS38U1+g9K7As:c8h/DkQvykNE3eHsLjo+3pwg9KMmAc9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ