Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
442748accce8dd7b54fc1f10eafc062e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
442748accce8dd7b54fc1f10eafc062e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
442748accce8dd7b54fc1f10eafc062e_JaffaCakes118
Size
241KB
MD5
442748accce8dd7b54fc1f10eafc062e
SHA1
ec7d29649c7bcc11ea8df4e4b195f223039aed47
SHA256
6031bb6e39f21c0aeb530c7a413533bfe2b7f7a91ecc6433d55ed313d389571d
SHA512
61416b1530a476692c6f187832a6f69e6eb017a925fb3c51f4dfb264e8e6e2990da63c86f9edbc9d4d5ee55dc55ddf3e93c8a5442b40b59a8e7b64ff302eade7
SSDEEP
6144:okeENDvTSn2SV/GuhYdViC7X57+nM7gSUZ3p+/oGc:oNEND/k/GLPX57+nRhWxc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ