Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
394f9bd98f7f00f0d89669a9cc805231_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
394f9bd98f7f00f0d89669a9cc805231_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
394f9bd98f7f00f0d89669a9cc805231_JaffaCakes118
Size
198KB
MD5
394f9bd98f7f00f0d89669a9cc805231
SHA1
eb3a838253e1f633b5bd648ac7981c14a848ab3e
SHA256
2a1510a5859ffd7863a857843bb9b4b15d27e4a27a216dc5cbb3612f764b5c29
SHA512
3ed152a2c808087319d49506508bae609980f273eb7f1475008bd0a6dbcb3a3d3878a35b6a0f7d6c06993df3b53798b48b28508783c0a2b5f836a1c01a027878
SSDEEP
6144:PFH2w7eJotYp0WBlkAgZiRULxwUJfALZn89Uwip:PHYotudoiRU1wUJfIaV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ