Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3c705819295d0b8cec183205b7b4aa23_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c705819295d0b8cec183205b7b4aa23_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3c705819295d0b8cec183205b7b4aa23_JaffaCakes118
Size
237KB
MD5
3c705819295d0b8cec183205b7b4aa23
SHA1
bdd309a4bb952bd1f7c9f82ff87445ed7f73eb7c
SHA256
3a914c408976869e4defdc9a4d273fdbb8dadfa31ecf58ffae4a1a2307dd5352
SHA512
56483853ad1ec40d30f39c11951ccc0f90eac6cf5f927bf808282b11389d784fdc1a945e9d554e823e89a952cb029e2151562ed9b7483449b93c5f57b4e2523a
SSDEEP
6144:d03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBGL20MfnL42RX:dc1udnLSg03ymK2Ilm1F4a4k0PMfP9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ