Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3c0f6b17168cd2cc79a57ca623a404ea_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c0f6b17168cd2cc79a57ca623a404ea_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3c0f6b17168cd2cc79a57ca623a404ea_JaffaCakes118
Size
198KB
MD5
3c0f6b17168cd2cc79a57ca623a404ea
SHA1
0dd153cfe229e9a053af87b77a7abb6192814777
SHA256
4a0753096a168ef7c5f5ca19aac68b1cdf73db29eb0ac51807177a1a9b7a3f9c
SHA512
069f90f88398154ff1285742cbe33d96cdd35c3a005909a9f413d60d2dbf1e739b2e53052cf50aee09d4b4ed15a556c9a333daf76299e52b8e3d44a3c7060ac2
SSDEEP
3072:DZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubMCQjQjDTA:spbaeyWECcp9AcFJ5qIUMzj0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ