Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
21cc7d623df6b6239f0e81c436e0d4b3_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21cc7d623df6b6239f0e81c436e0d4b3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
21cc7d623df6b6239f0e81c436e0d4b3_JaffaCakes118
Size
220KB
MD5
21cc7d623df6b6239f0e81c436e0d4b3
SHA1
b82bfa7fc64ea64cf5b145223906900f09058ad0
SHA256
02b66cd93af2bd8617624895b01c0ced695913997492cfd3c9b3c145cdd7363d
SHA512
034024fbd78d556222599745231dba0ba21fee5d8b4ff5dae4709ec94605e2c4632c930763ea7fa42085ea37ff9b82680195076dce22abeed1be7fb541ca3708
SSDEEP
3072:BHa+w4iRymxWstCvbSxWqCS4KSleWFXVmfuePuw5RDCV8aQePh9u/pxSpgNcUyah:vWtErWIleOnCTozuxUgNXyaNL64u8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ