Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
34b2d07d229f5d8a688396127bd2711b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34b2d07d229f5d8a688396127bd2711b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
34b2d07d229f5d8a688396127bd2711b_JaffaCakes118
Size
226KB
MD5
34b2d07d229f5d8a688396127bd2711b
SHA1
a443a997d5df2a869d419518744048385a366250
SHA256
1e56528c58d5eed539d56313b612263cab03a2ab7a038d0969fb66af61a25569
SHA512
d53e66ec356290fd21d1703ba5ceac97f1c1a78f37da360873e602e314ca4cbfa5e9ee12e4644195d7a297e916d98549504c626f8f8765975bf5e97645d237e8
SSDEEP
6144:Yi76VJ5rAnZht81P0YArDtPqDONC+AX1c5KZSq:v7QJ50Dt8FPArDXfAX1c5KIq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ