Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
2ba405c56d7202ae4d58ce92bf67775b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ba405c56d7202ae4d58ce92bf67775b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2ba405c56d7202ae4d58ce92bf67775b_JaffaCakes118
Size
217KB
MD5
2ba405c56d7202ae4d58ce92bf67775b
SHA1
cf4cc9c99cfa300bd7b81388e4a1f0edc8410421
SHA256
7e2e21771d0d818ba192531372a197c64ff9932c0356551d324e5a5c52fc56c6
SHA512
114170af7768b339690b7f14c2173da8aa07ba7438d73f6c511742365f6ad9f2380a732c2d64d9296368073044c56c4674b584e8a89336574e1b0f3bac19b46a
SSDEEP
3072:QBwNRwlsjGr90JtN0CoSaJKPzF0AcjFtTT0VggIPx0uUIYZ1uKBjOWD5ZICaJyZ2:QWTwl/5AtJbJIFtTgVnIY6qnI5U9qs2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ