Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
24f1e0060a47119261202f70b2654d74_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24f1e0060a47119261202f70b2654d74_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
24f1e0060a47119261202f70b2654d74_JaffaCakes118
Size
236KB
MD5
24f1e0060a47119261202f70b2654d74
SHA1
66419b65a969c7e1b0488d35e89fd01deb7952fe
SHA256
1f543f528e9f1ef65f370bf98941687aa160f1abeb8fdcac43e9cbe6daf3244b
SHA512
3b23a6c44992229c802d8640e7d678a958f6bd449b87c6f2089c96e4a759db4f0991768ae2479095d2e0c08ebd16d6513829c1b7546c977e528585a7c554c0d3
SSDEEP
3072:/lta53FgQulK5w1f8lGzCRng+b4C984ffdtwFz9LB81lqgXJ2n+JjYhDrh859z:Ta5h4Bf8+CFg+E6X7wFhLGlqI9u5Sz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ