Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1b96298c8e324e967a5811bb78b9567e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b96298c8e324e967a5811bb78b9567e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
1b96298c8e324e967a5811bb78b9567e_JaffaCakes118
Size
229KB
MD5
1b96298c8e324e967a5811bb78b9567e
SHA1
a567c960506dad65ce8fa2230373acc25f7efb9b
SHA256
3d34fbfa823dd0c6506d4779f05f2257952dc693850ff8fa0d7021ba28128ef3
SHA512
613a7bcf44056a811b077eec81cb320347715151b0cc13b158d93f0c5e49915cd2a0d54f19e7a1af2e4051dcbefeef3dd28bb0a0f63f97ffa829880683eb9519
SSDEEP
3072:Wj43w4x550Khdg4/EIMtyWnvtCIvkAqG7R0yyhaiELwkmayGN4XA4DQ1DTXcLk/u:W0g4+EhshthVlt7zyC9pGUHXWk/T1yv3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ