Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0a238b2787e56ae1812c0cca8e380a55_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a238b2787e56ae1812c0cca8e380a55_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0a238b2787e56ae1812c0cca8e380a55_JaffaCakes118
Size
242KB
MD5
0a238b2787e56ae1812c0cca8e380a55
SHA1
7838ba042683cd6ef56760d3d0c4f44376cd94ec
SHA256
70a4bc5262b8baf4b8a5a4216abf0a08d1c63bd7b26a3f629426c2581b3f85e4
SHA512
ee41cad29b504753a0945bfce673e013be082a756be1797257926b89c268743a9c76fc02ed91f842e4738ba0b89b94501bde8f746c306c145d1ddf38d68f3b92
SSDEEP
6144:e03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBdOKGSPvMV7uo:ec1udnLSg03ymK2Ilm1F4a4kf3fo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ