Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
390e5174bf32e45116c813f36936300e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
390e5174bf32e45116c813f36936300e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
390e5174bf32e45116c813f36936300e_JaffaCakes118
Size
318KB
MD5
390e5174bf32e45116c813f36936300e
SHA1
84c14721b0a02d499960ac764a4f8d62f9ed3d4d
SHA256
bad3aea12f173c6ee01c7ad41750b83e30d90bf8e230f3837a0efa045ff1ccb1
SHA512
4800383b10aebbcde14ddd27fb6e87705757bc90ee054fec9e9d5b0a71a0c502aa63974eb5295f453ee798cd6727e394ab2dbd6c1e915d36e0cd9b0602cd4f8e
SSDEEP
6144:kJYLGSu5ONdFirZa3HmNUIPg8Z8biZwotjPoOmTvQr7GQWnK:3vu5OPMrZa3gPg8ZdwyjPjmTvQr7EK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ