Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
369e44348026fefc0d0076d9898e8fb1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
369e44348026fefc0d0076d9898e8fb1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
369e44348026fefc0d0076d9898e8fb1_JaffaCakes118
Size
202KB
MD5
369e44348026fefc0d0076d9898e8fb1
SHA1
085b385fdaf29c08a9ed7fd0ee83374e3d0a85da
SHA256
45defd2c608774baf2b8a52db34f715b7837ff3b1899722d02962c8f658c51d8
SHA512
e2df37c7a657d1f6d4043ea2081bdd62cc45cb227bb70b373378916643a55f8da1348998d085902a191dfb2f66e169697dcfbce2e2219736e781cebebb210cc7
SSDEEP
6144:60YhjwuTT396HSjGT7UZ5SPzcxt4c+XT/dIw:AhjfTTHBkc4XXTH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ