Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
28095d0f6a5ebc0c5a435d0141cbf471_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28095d0f6a5ebc0c5a435d0141cbf471_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
28095d0f6a5ebc0c5a435d0141cbf471_JaffaCakes118
Size
241KB
MD5
28095d0f6a5ebc0c5a435d0141cbf471
SHA1
d5c0cb2ed3aeced0b66c47b43b47b1fcaa4577f4
SHA256
e52fb38856f91667747f791079b6fa376567b7a35f9bd0e8e8b25cb0c484dba6
SHA512
0adf66d03ecc2f122df2e5a08538e0643461ba5a6703a4c7786833c2d8fa9da0fc258a9d4e5140589b1911c76f8bd4180ddb856da78e102808ab3b103a77e946
SSDEEP
6144:jkeENDvTSn2SV/GuhYdViC7X57+nMoH1sFuez4ly6:jNEND/k/GLPX57+nD1sFBzB6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ