Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
444cd49ac38c82b145e48bcc2b890c47_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
444cd49ac38c82b145e48bcc2b890c47_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
444cd49ac38c82b145e48bcc2b890c47_JaffaCakes118
Size
226KB
MD5
444cd49ac38c82b145e48bcc2b890c47
SHA1
129df9e14bce7180f57a274a22c7ab7c5cce9bfd
SHA256
d0b0136755205d786080c48856abeaaca38b0f7a002905d115d98c56b83b524c
SHA512
64d56199b4f92118efd34074d7b6392b97277d3a9e76ec2c1f445dfed143c1b1ec7beb4fae1cdaf7067df7a1f64f477ac2a7e3a8101e89d8aee7f8b6b205210a
SSDEEP
6144:Ji76VJ5rAnZht81P0YArDtPqDONC+ACwtuR:A7QJ50Dt8FPArDXfABta
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ