Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
27230650f1ea1f44cb0d1066364d0932_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27230650f1ea1f44cb0d1066364d0932_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
27230650f1ea1f44cb0d1066364d0932_JaffaCakes118
Size
236KB
MD5
27230650f1ea1f44cb0d1066364d0932
SHA1
11e0798b06e4aca39bad8daa3b5d1772bc85c982
SHA256
d00ea7bad5ee1005dc782157eeadf0da377e20e4bd42116a8ac1b111fef91d8e
SHA512
6fca2130543955d3e081eaacad87f192e85abc044098002ceaebb8db0cc04fad6cc646a3199a592163309017480675d43ddcaa1bb6d6caa276809005e878b5b7
SSDEEP
3072:ElELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqsag0ca2p5SmLhIN0:n3kOMeaavF17EP6qyqsaMF5xhIWZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ