Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
24250bdf56e425ec31b701c45e96d7c0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24250bdf56e425ec31b701c45e96d7c0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
24250bdf56e425ec31b701c45e96d7c0_JaffaCakes118
Size
228KB
MD5
24250bdf56e425ec31b701c45e96d7c0
SHA1
19f36b927be05a7e3b17c53a3f4e427623a86f73
SHA256
f49ed11c2abd2c3a574194cb52d5b1bc500981bf1c62b966176d6272858cfa5f
SHA512
a0fa31993129e295978e80fe5547e5f0ddced4a1674f0db8ba488fee1a7d92a542c47c5136d3ec31ab84153c5718be49c84d335e925c5ab53c88035502c3ec7d
SSDEEP
3072:qdM/gorErzuZgr9OhQHccemSGudG2lAc3drWgxvC/Iwb1UCinZu/8h4qxaND9vRS:fgH00nemSGqQqcg+G9U/8uqkNBNS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ