Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4002deeecb40034f0174255f3aad2dc6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4002deeecb40034f0174255f3aad2dc6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4002deeecb40034f0174255f3aad2dc6_JaffaCakes118
Size
236KB
MD5
4002deeecb40034f0174255f3aad2dc6
SHA1
9ae585cb2f89c1451a1a35ce220ed5b5821db160
SHA256
4d8546be2d5904b872cbc63084509f63ff101daa4bb5a4fa90666a570199f20c
SHA512
659fe761dc0efc4af6034dd1e402cdf747c0bf401f3dbb3aaf18c0df4bdc89deee97e91f4939e548eed429abd6f8a4bc44d2372556d5b19f6cf471642c04a2cb
SSDEEP
6144:103XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBfeKjgDmnVyhi6S:1c1udnLSg03ymK2Ilm1F4a4kNjgDmVyQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ