Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
14d19e11aec631382363fe0d47a6a81a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14d19e11aec631382363fe0d47a6a81a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
14d19e11aec631382363fe0d47a6a81a_JaffaCakes118
Size
236KB
MD5
14d19e11aec631382363fe0d47a6a81a
SHA1
647260dd3cd50c14041ab9ca5ac7fa6ab3e856e6
SHA256
9856fb2781cefdcaef6aff786a6d39186cc1bae292549827e83d425bc7f667ea
SHA512
3898c3ebbafe267df02815ef60c112c11fb10e86988d921512ba788054bc3d9ba1df0a792891bd7406e770a7410840890de6bd5bd8340f9d96e8d795a76c0847
SSDEEP
6144:n03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBZE5Jd43sWHbGt:nc1udnLSg03ymK2Ilm1F4a4kHiq8Wit
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ