Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
2a6d42f5db3146fb99cbc6c90b1e9d43_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a6d42f5db3146fb99cbc6c90b1e9d43_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2a6d42f5db3146fb99cbc6c90b1e9d43_JaffaCakes118
Size
234KB
MD5
2a6d42f5db3146fb99cbc6c90b1e9d43
SHA1
5ef41dd1179da738ea71150ab33b6b1c030694b8
SHA256
555f0dd09ba0f29a82a6740b339c5bf33245da4f7948f7101dc2c65c8de985b8
SHA512
4ba49fb3f94274b415efa639e981f1c1bd8d8a6e7051caf13872ae7b20ced31306c1fc7eb2e9fbd542511b690875c3e42ff8b0d4ae69827a44768c80ed517623
SSDEEP
6144:L03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBP1ZGWrqS:Lc1udnLSg03ymK2Ilm1F4a4kh1ZGW+S
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ