Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
22891070cb2d54553987b80baa0c9f2c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22891070cb2d54553987b80baa0c9f2c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
22891070cb2d54553987b80baa0c9f2c_JaffaCakes118
Size
205KB
MD5
22891070cb2d54553987b80baa0c9f2c
SHA1
ff9283b578a2d562f51a701c0fa14e8fddc1577b
SHA256
31097885e01f393c40e9de60b8eba9d07dc942e48d1bfe93e6258e4717e1cf32
SHA512
a7a8c68606a85ac8c029112d66e69a388ab261764a303b462f51d5d7bb607ba7943534140114fda156abba8b6319ec32764534e047536f91ee7c9d9bb6ab0ebf
SSDEEP
3072:jTKa8NoTi3BaMHjCip1qm+f6T6ZhX+m4rHiTs0Cn4y/lJ7cA7T:jTKa8KW3ICj3pun+DHiTs0C4yn7cKT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ