Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0de690b7d9978bd1ac81e9465f180791_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0de690b7d9978bd1ac81e9465f180791_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
0de690b7d9978bd1ac81e9465f180791_JaffaCakes118
Size
205KB
MD5
0de690b7d9978bd1ac81e9465f180791
SHA1
3963cda2e59ae03cdf5fd02e4070e7136a50c81c
SHA256
1856d009d60d233cb5daa01f8d88581a35f669533fda1bcdc53e28c8cfb9946c
SHA512
691ce11c1eb25b685aa5c80a9454e7609cb0b1100d4701303c84e3c15a785dd0a3bea3494f0a3866109beeb78cbd4f819aa1c9432225ee3386fe71a38b3ef41c
SSDEEP
6144:C0hfPqsPFbrBLAxNIKgUgk16yr+dlJI0or:C0hVPKvlgnyKXFor
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ