Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
33f2d96177d50f1cac2816588d4d6083_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33f2d96177d50f1cac2816588d4d6083_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
33f2d96177d50f1cac2816588d4d6083_JaffaCakes118
Size
317KB
MD5
33f2d96177d50f1cac2816588d4d6083
SHA1
b65820c9b2c1282a8772e99c5d1cd7efe75fdc42
SHA256
654ca14c01d7dc7acb3fb32b47e2193a35c4b4b32a8c90d5bf9f0915aecf6763
SHA512
0551674dc8abbdbb46acb53cbb652017e4c132589fbcab72f00fe43b3455746b986dad5efe2bb050fcdff4873ffde140c7081e860f3529628077bb88a11c59a5
SSDEEP
6144:tPSt0zZpuK/KAfKFJSMXkzGVvh3l2PFRxhPEdDg+nfjSzXraa6EddNfz:9DZp//xyFJSLzGVJ1a3xBEa+no2a6Ejl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ