Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
2dbdc4666dc43662024cf3989f1a78b6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2dbdc4666dc43662024cf3989f1a78b6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2dbdc4666dc43662024cf3989f1a78b6_JaffaCakes118
Size
184KB
MD5
2dbdc4666dc43662024cf3989f1a78b6
SHA1
b61471dd113a9a33c9dbffa80b1db33c53f096d8
SHA256
6ec6d541ad4769cd08e8d11699507c855b37a015b0432411bd001cdefb6d64e8
SHA512
6a91835e1ffd4c3ec977914088083df936627d25603228e800ea9072157c5bf3157105c10d8a144f1b8e2fd0de1380774402cc74bf67f8baf2258db8cee055d6
SSDEEP
3072:mmCG6AG3jyOIaf/bjqwBuWoVrxeoi6S5I6iFZpUO1zbVeHPN3wnjecv9OgvtVeEv:xt6AGzykzWwSNxLivI6iFZp5Pkl3wSgX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ