Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
2baef87b2e35d8e4f3be42d384b6a3a2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2baef87b2e35d8e4f3be42d384b6a3a2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2baef87b2e35d8e4f3be42d384b6a3a2_JaffaCakes118
Size
242KB
MD5
2baef87b2e35d8e4f3be42d384b6a3a2
SHA1
6b15cb9b7a3c27e990da6036cb63757ba6c83431
SHA256
2b0568886d41e8e7982a9980319affc36028986cf6d1e9604b9fc6687c8cf7bf
SHA512
852ff66e2dfbe07777cf126ed07dd359e302690e4f3f4497276f5f7a11e7e2e3fff98df9649ff09859671e23d1a88270a6a83bc8c42aa8aab70498b808798ce8
SSDEEP
6144:X03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBRU/M3aHKGE:Xc1udnLSg03ymK2Ilm1F4a4kw/3qGE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ