Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
25b3ad1d879aab06488c026998e8aedf_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25b3ad1d879aab06488c026998e8aedf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
25b3ad1d879aab06488c026998e8aedf_JaffaCakes118
Size
226KB
MD5
25b3ad1d879aab06488c026998e8aedf
SHA1
1b04da98b40f2b8893a20cd94bd0d4fd5e9780df
SHA256
595b695c4b038b1169aeb4b73f6adaa3bb95f919b75880145cff786fb4ee7a99
SHA512
72e32c5485f44fde6d8f0b0a9a9c6258da383d8938dea677653af173f4e228e30fc591cb1d1381ed3db112d8a0de54f63290c6c52213314cd47f5c02c4d208a4
SSDEEP
6144:ZSdrrQP+LHfPqGLgqvOX8bvPhmWd9qgV11bBMmiMf4GiJ:ZWu+LHf+qvOX87PhDVVjB8+liJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ