Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
35fedf16da72cd2bb40ba0382bc10f97_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35fedf16da72cd2bb40ba0382bc10f97_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
35fedf16da72cd2bb40ba0382bc10f97_JaffaCakes118
Size
202KB
MD5
35fedf16da72cd2bb40ba0382bc10f97
SHA1
76489bdc85736f32490590785a722095230b077d
SHA256
07487ce14d527602378d7e7a87a82e3654691d06208670e07fa09c541dc9e1ca
SHA512
51bbecc80b3573aa91a472713a4964e5016ae326847d4abb4cbf21e0abd8bedcfa28af9122d4a47c074bfdd9e6d37e8d80a71c028264989683b2f43e62612f52
SSDEEP
6144:xHCTecfxmJ5TINDYwUi+pLTAxxNMIehSYSZ+m:dGxG5To8wUi4cxJehSH+m
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ