Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
42397ed42eaf70c04c4c43cb9c17750f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42397ed42eaf70c04c4c43cb9c17750f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
42397ed42eaf70c04c4c43cb9c17750f_JaffaCakes118
Size
200KB
MD5
42397ed42eaf70c04c4c43cb9c17750f
SHA1
4042a7e6b330253e0e34350f0c178830af0792ae
SHA256
d1472fdf04474e5c4db4c30e32f4040e99b825b071d6621c62aa25c7d8ff39d2
SHA512
0ed1c06b16478d23bb8c8775fc2dfecc9cfccb64ca0e8bbcce7997771dcaabd93a5a8132126bbbcb30dcb94cf8b5c7e1cce30ee507f44ff8ec750ddddce3463a
SSDEEP
6144:c7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRWN7i8yAH:c78AqbaVcmAo7cGNpwCi+eQZWXd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ