Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
42a61bc4979e15d1e7030050e893db25_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42a61bc4979e15d1e7030050e893db25_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
42a61bc4979e15d1e7030050e893db25_JaffaCakes118
Size
194KB
MD5
42a61bc4979e15d1e7030050e893db25
SHA1
cb2738ac01d3c1a4d69b1e150aa995fcedc6f3ae
SHA256
8cbb8ff5859ead048e69e8a3527a25ea9b411561976bdf8cc6d7c26d939b0960
SHA512
1536a3549507d93d0e1067ce3f68e3085ed45a04de293580388523040876faaf660d600d0a84dc0320f5f1d558614b98a84e21205963596d62c8ad883ada571d
SSDEEP
3072:wZ6r8aaxBbOIdbOpqSfX6K83/GzJn6TdLr0GVJ3O+pgfD7FiTOF:w6YhbiIdoqSvz8vSnURe+u3FiTa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ