Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
453434fa7779c1753a081b5d7fd3157d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
453434fa7779c1753a081b5d7fd3157d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
453434fa7779c1753a081b5d7fd3157d_JaffaCakes118
Size
228KB
MD5
453434fa7779c1753a081b5d7fd3157d
SHA1
bae92a21af1f4871c3b162d98132225ca54f1b94
SHA256
04651ed393a57009188fbf33579536c955955767cf94ed9cef75112931e1f9e5
SHA512
1847ec34356153ee255c0b65cefeee2a692a2e03715dd45e0f7dad6c18b44d3ecfb5ef793d6fbc9ec3d805d5f86cd9f89b54929985a6b7ac3c7becc30d0a61c7
SSDEEP
6144:l4Q9x2N2h74vSmC/eakYkJ9afR+9ge1LisQOcNeSFDFb105hFB62:mQn+vSbkYkqfRNe1LiN/b1FOhFBf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ