Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
2755e933077f5c093309214965b22701_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2755e933077f5c093309214965b22701_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2755e933077f5c093309214965b22701_JaffaCakes118
Size
200KB
MD5
2755e933077f5c093309214965b22701
SHA1
0b0eae114f66219174a7f8d4e30293b5cf691d68
SHA256
c12c2442118a829550f239e0fb065debe4d78f5925de560bfec66a722a235e48
SHA512
7be44eefc107a4af255e4357d6eee178fe3b74dd4c4f31232d2bc96cad6648a71f9bc5105a242cf927aab8e3f76b1f49e746ff5c12dd0273f2f1606857e88b4d
SSDEEP
6144:77oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfR4Ntjt9J:778AqbaVcmAo7cGNpwCi+eQZgbJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ