Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
2693e2fb20e166aa392ebe47363f1e99_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2693e2fb20e166aa392ebe47363f1e99_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2693e2fb20e166aa392ebe47363f1e99_JaffaCakes118
Size
318KB
MD5
2693e2fb20e166aa392ebe47363f1e99
SHA1
5daa16af97344c020537c4de3b903773059be531
SHA256
712dc990ca7e48968fe33abc7ac4fd6780feb9e5202e389bd5c1948a68240021
SHA512
0bffbb1e2dbd13100ae327103b2bc1bfb0f288b8e723c12f690a744dbac9a43e09b85ed3f6ae8d9576189632ff35b15ae44ed07403452e1b9d75a78fa47266c7
SSDEEP
6144:NaPq9qMJ7S2+A2kplVLDnp3JD6sRaWefpO1MZgCBxI1MniiYsd/TUvoCys:ES9HY2+mPBn36OeAMLxHiHG/TUv9ys
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ