Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
221d9df23c66e0a10f729f64d796dba8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
221d9df23c66e0a10f729f64d796dba8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
221d9df23c66e0a10f729f64d796dba8_JaffaCakes118
Size
191KB
MD5
221d9df23c66e0a10f729f64d796dba8
SHA1
2b813381479b963c4cd2bb0d5c6fede2a1ff05a8
SHA256
2ecebaf5d33813e16ba00c88e38b9d6abea6fa12340843ec73225b301738f13b
SHA512
de7c106947ed378aaa8e192837e859554de74b568f59031ffdee12282b16dbd585a1d2e9a0d6a5383cbe43692857916229fe5608d69a9202932e0c363ce62454
SSDEEP
3072:RgP202vBXGx8OkXQPZZk/B6JCqZgDjKrnp7ZYQwS7wfHCof5j/sZeqRagd+GwfCX:OD2JXPXyZe2sgp76QGfHCIjEcqRT+Gwm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ