Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
36eb8e8391cf6fe3ab2cbd773c9d1ed4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36eb8e8391cf6fe3ab2cbd773c9d1ed4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
36eb8e8391cf6fe3ab2cbd773c9d1ed4_JaffaCakes118
Size
236KB
MD5
36eb8e8391cf6fe3ab2cbd773c9d1ed4
SHA1
480a510babe38b98509feeaf97ed7e6c808e5d33
SHA256
28697bf9db357d4e6593bc926a58c8c541a74a879b294f1a3c6fd05475352dfc
SHA512
469eb2f8f6941f2025069fa392a639cb39a2de1d590c9a50df45fecc87ac03a2ab704cbc2bb989f934adfbce874a20e8180d53cab590412bae0b934a9ddd8d1c
SSDEEP
6144:103XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB8jmzIyNE9H:1c1udnLSg03ymK2Ilm1F4a4k6KDKH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ