Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
16f8832161d949aaa17ab57d25a7259d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16f8832161d949aaa17ab57d25a7259d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
16f8832161d949aaa17ab57d25a7259d_JaffaCakes118
Size
241KB
MD5
16f8832161d949aaa17ab57d25a7259d
SHA1
009fdfbe9836baf3bfa1ea07cbd616ea2fe303e6
SHA256
87e2fbf7c839f129532470ebe464fde31b8ad5b676451602f0119ac85baeafed
SHA512
2126f1610cdf9d62e0e44614313f6c9755ccd35475c98aa0c62a230efcff4e48e019da23cff24f0606713240be747fd1f884c189f14f216bf43fa20a88d61de0
SSDEEP
6144:/keENDvTSn2SV/GuhYdViC7X57+nMB0J1RsaK9:/NEND/k/GLPX57+noka9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ