Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
32d1180b31f66d008e327e1660ab668c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32d1180b31f66d008e327e1660ab668c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
32d1180b31f66d008e327e1660ab668c_JaffaCakes118
Size
241KB
MD5
32d1180b31f66d008e327e1660ab668c
SHA1
db90ee0e0ece045c075fff138cf06ab37e34d097
SHA256
7a850632494b8b427aeb2bcd90b9b5691293b842057aa8c55dfcca1984fe5eb7
SHA512
51a482ff26e64f27d7c76061de8f92da2ca4dd1251a8ea1484fae05b7d2b67e2a9e274a8ee8b5a0f9e4817f7e642b77b122bd24b82760ba095b9ae7a57243256
SSDEEP
6144:skeENDvTSn2SV/GuhYdViC7X57+nMHDU9gLVG:sNEND/k/GLPX57+nYg9gxG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ