Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
16e677db199ffdec698ea49c94230840_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16e677db199ffdec698ea49c94230840_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
16e677db199ffdec698ea49c94230840_JaffaCakes118
Size
240KB
MD5
16e677db199ffdec698ea49c94230840
SHA1
b08258675f7f7140f3bcab6c26aaebe3b0382996
SHA256
932e10202fa309090b9f80403cb1079865f720ad1ac4a4d2faa7f7a37c78ecd7
SHA512
ab7a810acf17ddda760797859c33791d24e9bff05d99e4ccdc87ec925e467b3d99d55cdd8589731328925f29562eac9c92687c5e12f18d966de57ea35e60ba61
SSDEEP
6144:WkeENDvTSn2SV/GuhYdViC7X57+nMiXZjcnMYuGhqhG:WNEND/k/GLPX57+n7XZjcnMFqqhG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ