Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
18aa0bd0467501f232820e5a1c3df6a9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18aa0bd0467501f232820e5a1c3df6a9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
18aa0bd0467501f232820e5a1c3df6a9_JaffaCakes118
Size
201KB
MD5
18aa0bd0467501f232820e5a1c3df6a9
SHA1
d30c4c6e56f5cf9f7f2d2a6d1e6519ff4da26912
SHA256
3cc02432bb990798016eeb0c86381ecd4c9df26394ed5715753d0d740fb62de4
SHA512
e36ef178883718366686d3674be324d1e91144bf947713673ba86d3341d36c02cb416af9fef0f321790ee2816ae595759baed96aa7ff44c68515622811b84e4d
SSDEEP
3072:g95G9YbERTYD7PfuXqSG2iYAAttBFRvdRZHDLdBjIFzNkh1JIgGemKkJAIkldG:m5YB4ruXIiAAttZvd3DCza1mgGexNQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ