Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
158d604b426401241a031d9d7d7bce58_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
158d604b426401241a031d9d7d7bce58_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
158d604b426401241a031d9d7d7bce58_JaffaCakes118
Size
317KB
MD5
158d604b426401241a031d9d7d7bce58
SHA1
d0ffac07485202a3ede1f8a5678b62ab4ea02a89
SHA256
116f4c98562733908fc635cfa2ea4bd07be3189ebd94b960b6eb76b8c9dfa201
SHA512
a046b82fdf6e3282327d468654f3cd287eb7f756c1cbdf283c28ef4147f636e55674919c326614ad792877bb446e16df43bb7363c96982758438c8f9813ea5f6
SSDEEP
6144:k+Vufmr/y+dI39TdNAJ2WLiQWKwqKHoa5bUolxJ7yy3bDEFvq1iAYIo1MN1OQ:dVkmrfUdNKbL7Koa5UolrbDh1ixb1KkQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ