Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3bdf3c1d9b1094dc7e43bb7999674ade_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bdf3c1d9b1094dc7e43bb7999674ade_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3bdf3c1d9b1094dc7e43bb7999674ade_JaffaCakes118
Size
203KB
MD5
3bdf3c1d9b1094dc7e43bb7999674ade
SHA1
1ca9a8d1798133d3d57085ce57ae4f4af9fb4243
SHA256
7e5b17a7c5388a77ec56c6c15d6831c02fe298e4292d0da75fba88368f43209e
SHA512
f71dfb259ff6ebf286b0c1b7b6baea2391e7875520408f6108039292b7a7fd5381bf18a417ba1721ae4f86767785a2c8a610b474910efcd26a0860ebca09f98a
SSDEEP
3072:z3fpmK5FEtmhd2lqlToq3XEMkRBMKqLK9lYCByLC+sSgYX3vGUa+lVfiDBGxpBqX:zPf5WUBlTpkaLKsYLyut+lJiDBDX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ