Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
30ec2a0cd5c35e2087987c38906f60b0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30ec2a0cd5c35e2087987c38906f60b0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
30ec2a0cd5c35e2087987c38906f60b0_JaffaCakes118
Size
234KB
MD5
30ec2a0cd5c35e2087987c38906f60b0
SHA1
388eaa2dd6cd6299cee6d925d2d0d22629ab6c5f
SHA256
d60c5a5f337b869974174912e06825d73eeed32425669ca8411f43264eae3eef
SHA512
f9d1d8a20cee4e3d38c28d19a0b8433bc9498585fe21ef8646fa1a2003a5a3e3979a4863f512a9ba2c0ed7a02e59dd5917845e62a428fee2247be781f1745343
SSDEEP
6144:/03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB0xsE5czRf:/c1udnLSg03ymK2Ilm1F4a4kosE5czRf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ