Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
42b73c469ea9061e8b49be1f5c94ead6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42b73c469ea9061e8b49be1f5c94ead6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
42b73c469ea9061e8b49be1f5c94ead6_JaffaCakes118
Size
224KB
MD5
42b73c469ea9061e8b49be1f5c94ead6
SHA1
3ced830a24f394c0b50aa98ceae36d2d93760700
SHA256
6b7411892f8f95658efce2a9a89d5fe658e690c816d905645fb2decdead290d0
SHA512
8b75dc60cf16b2ceb19b68c02b85f3f0a7fa6039f0709f0ef54dee80d7fad86a1d3617a5a6774e42455422c3f5c294189e015afdd5ce31e38d351f435e44b1e3
SSDEEP
6144:bmiWZ5wOTMB8Zq6ic2ZUz4hTmoo8B/8cqVyfycemor:bm/Gd2qhwmTmotBRhpemor
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ