Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
24e06710fa45ee9b0bc2aac91ac43875_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24e06710fa45ee9b0bc2aac91ac43875_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
24e06710fa45ee9b0bc2aac91ac43875_JaffaCakes118
Size
200KB
MD5
24e06710fa45ee9b0bc2aac91ac43875
SHA1
415918a57929024f1268e55636d089b552a5b984
SHA256
594f52665a7f22e8f9fa6639796aaef64cc2fc020b31484938a07b3ad3e33f29
SHA512
e1f9befe96d61edcf78b90d834ab5230406f13fff8c6022aff68e54d27c1e6cd656903f2fb6da3c1682b005d4666a0265634b54e03b5e7f2999f5bd4ef61f51b
SSDEEP
6144:g7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRdSWBEd:g78AqbaVcmAo7cGNpwCi+eQZdSWed
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ