Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
230e42d8efac35ad2c57348b4bfe04ad_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
230e42d8efac35ad2c57348b4bfe04ad_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
230e42d8efac35ad2c57348b4bfe04ad_JaffaCakes118
Size
202KB
MD5
230e42d8efac35ad2c57348b4bfe04ad
SHA1
c78dab8093c14e573b7bad8d41638c3a6baba887
SHA256
e271bbf491a8e5e3b3bc9c31e4dd9e8057127672f97ab7e058fc7fbc821a01bb
SHA512
5ea1952fd90251cac6d5be090e4c5c7d0b0c8bcd64465b049a75c86530354414cfd3b76770341b6da9fb6713abc35671b46cdf3448272fe4745db4b3d2e9ff7e
SSDEEP
3072:Pz5V04aH+/F9alhgfDpilQMCqQrZVOpX2kN+whLSMfjvHLmKyS3o:rQ4K+/F9aDg9HMCHlIpXrTdSsjvrQwo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ