Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
2d62e2e30f9bff96dbabcca1962a5b6e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d62e2e30f9bff96dbabcca1962a5b6e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2d62e2e30f9bff96dbabcca1962a5b6e_JaffaCakes118
Size
236KB
MD5
2d62e2e30f9bff96dbabcca1962a5b6e
SHA1
9edbb0346957cd585c9df33d9efa646a8cc0bd71
SHA256
48b3e963b556792cdfa06e8fb17c74355a9d193cb9c9cf5ab58fa5fa372259a0
SHA512
0198655f1fd3b542aad4a0f77013053a5b3196ca355af1ff392b655fae21fdc144e7df30696869cfb6eba4a094a7cb7ba05166414288fa3942e7976b01908b52
SSDEEP
6144:Q03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBPaq9vrmKy:Qc1udnLSg03ymK2Ilm1F4a4kRDrmKy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ