Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
275e2513b7d03c37693e544c57d4b782_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
275e2513b7d03c37693e544c57d4b782_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
275e2513b7d03c37693e544c57d4b782_JaffaCakes118
Size
202KB
MD5
275e2513b7d03c37693e544c57d4b782
SHA1
91470bbbaa57311fb9fe72eea8ed2840d8a3e2b8
SHA256
2f95cc7cad0233561a093d4641061a4b09881489fa9175532b78b8f009a0d095
SHA512
bc8ba99b274647fd5bcc426eab6c2585f11ac85757bc8a8af6d6bb3aaa6eb0c2b9217e4425af8e6c5cc5c22f3ba92e4ac550b4de30c5173255b2b9c335012edc
SSDEEP
6144:wQ4K+/F9aDg9HMCHlIpXrTdSs2RywlYvuU:wQjS9ag9sp1ks2DzU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ