Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3d082e7a5d2eb50ede13d3f1c1e8ac8b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d082e7a5d2eb50ede13d3f1c1e8ac8b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3d082e7a5d2eb50ede13d3f1c1e8ac8b_JaffaCakes118
Size
230KB
MD5
3d082e7a5d2eb50ede13d3f1c1e8ac8b
SHA1
187414b5c588bbc5596711e3d787752a13623af3
SHA256
06044aa7e9c8ff0e09fe00cb95c3e80f3088511c91a3b61906e1d2b76d1157e8
SHA512
862f27503a8ffeebc67d936f6b825897e403f85d45919861a1aa7accf66edaf5d474b85063b5736343b093fa355560032f336b676593621948df5f00cca3aeaf
SSDEEP
6144:XQ2E205qRTe5uht1lIJTgUl4epYz4QrkhXNZLBIYEq:X1N0IJeI1yd7py4akPZ9ZEq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ