Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
18911278aad1024ae44fe57689c0de23_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
18911278aad1024ae44fe57689c0de23_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
18911278aad1024ae44fe57689c0de23_JaffaCakes118
Size
236KB
MD5
18911278aad1024ae44fe57689c0de23
SHA1
0cf9120ebe9fd2ce84fbd41aa57179878ff7fb90
SHA256
1aec47c4f6761766bc85d4481e6cbf870a1db2014da208dfca9ecef3622d5212
SHA512
727538c36f51370d6088e39523618e0b70f56442a83354efaeac4c08477d4417fe6440aa71339e5a41b10ce32fe343431db5a7ad959cd66c469cf3357e5592e0
SSDEEP
6144:X03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBzKa6po064HM1OR:Xc1udnLSg03ymK2Ilm1F4a4kdMC0ZM1y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ