Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
29ebd24cce2e04bff9ef4b74b13c1fc4_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
29ebd24cce2e04bff9ef4b74b13c1fc4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
29ebd24cce2e04bff9ef4b74b13c1fc4_JaffaCakes118
Size
234KB
MD5
29ebd24cce2e04bff9ef4b74b13c1fc4
SHA1
25178256bf00ef77d7f6672c701ad83fc5f55037
SHA256
a1bfe5b958217788ffda25fa7f61db27e7bf66a0c4155aa9931210a5defd9e46
SHA512
260607ca37696165f1e777a548283a41d04543d08e8cd1b5708fc064244592d275c75d236c4ad3a48b0b60bb5a84e4449b572cd266682e93ba01952f246cee75
SSDEEP
6144:t03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBLOjSuGfXqU7:tc1udnLSg03ymK2Ilm1F4a4kl0SPSU7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ