Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
327faafe62feda8e59b21ee8fc84e65f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
327faafe62feda8e59b21ee8fc84e65f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
327faafe62feda8e59b21ee8fc84e65f_JaffaCakes118
Size
318KB
MD5
327faafe62feda8e59b21ee8fc84e65f
SHA1
49bc6bce3cdb3fb141521d1c3e13d6b06c5fb6b2
SHA256
0a6f0732e43073e51a0610347abdc7473fc9c5947b83a2e54f06cd742488a3d8
SHA512
c4aa9ab41e20c9d0a9e107ff5118f248b9d473195bc54dd2a54526ae1569392891bc5cc0a1633e8e00cb6d31948f1660ba08a2ba714876818ceda49ca281cccb
SSDEEP
6144:EJYLGSu5ONdFirZa3HmNUIPg8Z8biZw5yztAyJjP9OJKemEgzNxc6:Xvu5OPMrZa3gPg8Zdw5yztzj9QUZJS6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ