Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
35ae56cf644c7f0e261529ad6fbce238_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35ae56cf644c7f0e261529ad6fbce238_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
35ae56cf644c7f0e261529ad6fbce238_JaffaCakes118
Size
317KB
MD5
35ae56cf644c7f0e261529ad6fbce238
SHA1
7813116750e212215f50c17a795cb04fc3979ec6
SHA256
315c4493aca9c1f4f83124e3ca7943007228930881c010bc9f96c184cb6d738c
SHA512
85435e0ada04b413e65da41a8e1082ab55808b77cd6dc437b8e2bebf1fe7a60f9ebe6c21cdf904c7dac196a6b7154f9c44e9e3b0b511bbecbf85ce77f83b6ac5
SSDEEP
6144:e2LcWBYn+5Ter9gRClrNpMWdEhrg6Mh5OQ5P8UtbJ30YtfrjW6:dLDM+krqRClrbnEW6MhUQ5UUdJ5tDjW6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ