Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
33b9ce5d243366be82a6ff72a9c0a09a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33b9ce5d243366be82a6ff72a9c0a09a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
33b9ce5d243366be82a6ff72a9c0a09a_JaffaCakes118
Size
228KB
MD5
33b9ce5d243366be82a6ff72a9c0a09a
SHA1
534d40fe1def1202472ded1644ad8f37515fddc7
SHA256
77112a441a4026a792f6e240576b2c6d2503c180ca3b6d81fca68a250f9698b5
SHA512
c3eda4be99e09e4eaec95b7fcb819aec15749d3ff3e1e70cb416aec0bc6c12a7a9c55be52500069f46cc10acf5de2a6fd9a9b30d0f40da692ac0574bc2b0bf88
SSDEEP
6144:hWtErWIleOnCTozuxUgNXyaNL6py5K7JsQLI:nrrHau4XyaNL6pdJLI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ