Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
398f964a8de6cd53cb103b7b43df4799_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
398f964a8de6cd53cb103b7b43df4799_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
398f964a8de6cd53cb103b7b43df4799_JaffaCakes118
Size
318KB
MD5
398f964a8de6cd53cb103b7b43df4799
SHA1
8b45275ac34d5144929f811a4a8a1c7fb9526d59
SHA256
984a3c02dd15443dd55f8c884e618544fddf0ad88b6addc1d4396d076da29186
SHA512
4978fe4787ee4daf31076dd4eb5a6323634943c3f2769dd9e9633386360b9e3d3310629adfb3de469beb9ff9d207b83f431ba5443cfe366cc4dd693c64724587
SSDEEP
6144:vR2R8i4jwJq6W4Qmp6rD1rRBttWoPLXtYOq/8E3atKnpv/V/natgD:5G8jjwJqoQGe1nttdPLXo8WpVPaOD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ