Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1b2149fc9a847ee5d46ab9beddb0b03d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b2149fc9a847ee5d46ab9beddb0b03d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
1b2149fc9a847ee5d46ab9beddb0b03d_JaffaCakes118
Size
207KB
MD5
1b2149fc9a847ee5d46ab9beddb0b03d
SHA1
c081b04da820d1b833b502ad9e02644b9050cecc
SHA256
ebffa0c59fc2c7678d20db6a7c3ded14f6fbad0026dd05891b7075d510c27f12
SHA512
8c20edf9199f83f2a52bf14c6d9af8c2938bae7865110ee9fbcaf47626dc39be5c1b9a6469b3de49a5ac829a896d7f73c5e26d8f5c496786068fecaf1e2f8bc3
SSDEEP
3072:gZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3Sub/1CT7TAT5:TpbaeyWECcp9AcFJ5qIU/1eg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ