Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0e747524591e65d062e8278928dc586a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e747524591e65d062e8278928dc586a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
0e747524591e65d062e8278928dc586a_JaffaCakes118
Size
185KB
MD5
0e747524591e65d062e8278928dc586a
SHA1
f2ec595a2d561eb8345c7853ff3db2bdab236a1a
SHA256
46ea3cf34c164b4e432e82f670cce899c09cdde14f1ec297cee58cf63e8905ec
SHA512
9970f409e9bba990cd1713ea20e63d2b19785fac804d54504caef376f9eebb1cf5e59cd9beaafb3930ff61658ca5b8a7a2eb03ff758848bcd32f0e73e4475a5c
SSDEEP
3072:JVL/TnqMa4/08IuyUkNoCu5qDqVdc72+Q5CMCC8DPN5z7bIA31TzxXToUb:nzqMamIudsc5qqcC+axwPNd0AFTzxXj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ