Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3418d6d674306d3f77bcf229488a89c3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3418d6d674306d3f77bcf229488a89c3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3418d6d674306d3f77bcf229488a89c3_JaffaCakes118
Size
236KB
MD5
3418d6d674306d3f77bcf229488a89c3
SHA1
b37c47ca99c8ce3c951c08fdf2d36461ef768843
SHA256
6348076bf68f11732c5d43cb8f707f65e52cbcbe5a452ec02c6733d1dda7326e
SHA512
9984a3c18fb1eb1b093f35d739e02d234de36cdbac9233c388d6e5de727e8b7b65e1c030909f311c0166768d6c1cf6dcb71354726a195b4824f4fb82f3763f3d
SSDEEP
6144:S03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBzeRqqI/Z:Sc1udnLSg03ymK2Ilm1F4a4k5+xI/Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ