Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
327e40b55360e5e4fd667cb5c9641687_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
327e40b55360e5e4fd667cb5c9641687_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
327e40b55360e5e4fd667cb5c9641687_JaffaCakes118
Size
241KB
MD5
327e40b55360e5e4fd667cb5c9641687
SHA1
fa3e8f76aef1950f4285e0566af935f73f17e50c
SHA256
af53e0552849e1f84c5e6dd5d110c99c02f970a27b750254a91937cd8ebfd906
SHA512
d9e6d15007ce2548ec25baf59be3de95885e225a145a2209d2f4f35ef5cabbe2b12ee922f22e1735b8d6cd978f9fbc7fc7cd9257f5f42a9c5b4090fd24b057b6
SSDEEP
6144:9keENDvTSn2SV/GuhYdViC7X57+nMHH1JuBbgfV0nZ:9NEND/k/GLPX57+nW1sEUZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ