Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3d01055efa5cb49d5ad58e9ea7b1c37a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d01055efa5cb49d5ad58e9ea7b1c37a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3d01055efa5cb49d5ad58e9ea7b1c37a_JaffaCakes118
Size
242KB
MD5
3d01055efa5cb49d5ad58e9ea7b1c37a
SHA1
218510b3b38e3a6e2bcebcf4ef00faa10bb78e0c
SHA256
58f5345b36153bbb288b0cd9c6fe9c013f990999986db3dd7bad8ff3f16d1cb8
SHA512
4fa5ce9e1e4a7f206fb86d5dae0c5a06945cb8aabfd42757bf5c5cadf1035af5ea18c18920922b827095440743c7300470ee71fcb64ea9e2799cbf9a3d5f9ff8
SSDEEP
6144:AkeENDvTSn2SV/GuhYdViC7X57+nMGH19ZekuRy8Rd:ANEND/k/GLPX57+nd1QRDRd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ