Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1bd2b52bce5aa4b6eb44af759b8183bf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1bd2b52bce5aa4b6eb44af759b8183bf_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
1bd2b52bce5aa4b6eb44af759b8183bf_JaffaCakes118
Size
222KB
MD5
1bd2b52bce5aa4b6eb44af759b8183bf
SHA1
1fe056a64455ff30a7cf243f4d5118d613ad35c3
SHA256
0c881879685fdfbc1f1ec276425694063a9bc3c3811705cfcd04502a2d9d57c7
SHA512
3e203beda89a523e87edf834e63bc1b6a0bdd49d8f7bf6829b7a1c18bdfecd3f110d255d128c4fb9426bdcea1cffc0245685f3702b0f03bb281835ba89ed05be
SSDEEP
3072:t40Ns6G7r0uEK2d7gUZD40BWiCqgucwdywyvPWQSvQ7RAxVxue4rFLITwQRrUwUN:t4MxRRvZD40DCdBwo+wMVkISP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ