Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
25649673aee748fd74c23e2da5c7288a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
25649673aee748fd74c23e2da5c7288a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
25649673aee748fd74c23e2da5c7288a_JaffaCakes118
Size
185KB
MD5
25649673aee748fd74c23e2da5c7288a
SHA1
f4ef1d6f9ef2f8f251cc021c20afb8f1c37fa8f0
SHA256
1a20fcf33c08f8045c391e528162d7db3b40cc4d4935a4d5ae8de4ba24b0c2a6
SHA512
cc86e75a3ccd8c27d1d77ddedec5ad657e45718467cdb23c4f2aa2b02217119bfad39051df4fa02550bba9a570c3e48961d57d98bd65e0edb0c3088d06d7c39a
SSDEEP
3072:RVL/TnqMa4/08IuyUkNoCu5qDqVdc72+Q5CMCC8DPN5z7bIA31Tzlje:/zqMamIudsc5qqcC+axwPNd0AFTzl6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ