Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4140b48476654ce707ed677535038839_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4140b48476654ce707ed677535038839_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4140b48476654ce707ed677535038839_JaffaCakes118
Size
241KB
MD5
4140b48476654ce707ed677535038839
SHA1
2df462b2aa34af3f808ee1ad80c6e6c62974fa6b
SHA256
e829fd62d505b2728c895db355362db08bad6d208554481ff87971a67c2df72f
SHA512
a617edf174063db2b3c761e67bb290f893b43c761cfe8f9baf9ff36b78a1044d23a99ba294235e87249e43797563b885914055e3bf5f51be5b0e60341f0b05a8
SSDEEP
6144:VkeENDvTSn2SV/GuhYdViC7X57+nM4H1oF2kVVUUs/:VNEND/k/GLPX57+nz1oMkVVns/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ