Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3c4ddd10528a262af0fd03045bc29fad_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c4ddd10528a262af0fd03045bc29fad_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3c4ddd10528a262af0fd03045bc29fad_JaffaCakes118
Size
236KB
MD5
3c4ddd10528a262af0fd03045bc29fad
SHA1
990dc00acbd83948116b41a2cbd092e81dfb5869
SHA256
6f67e56568b672af23e7938aadec6c5e4e8b1fefcd7188b91fe74329bb9093d7
SHA512
db0aa501d19cf2e3fb50d4d95c2006f78c19cf32aa3fa53ba7da148b14517c417a794331151667b192c1f18db104c437ad48e5eaea26e5009dbd1297cf42e62a
SSDEEP
3072:ElELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsCt0CrKaVx1041od:n3kOMeaavF17EP6qyqsCt0Cmaf04sYy1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ