Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
46a734c16599d1cb41fac1fae85be9be_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46a734c16599d1cb41fac1fae85be9be_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
46a734c16599d1cb41fac1fae85be9be_JaffaCakes118
Size
205KB
MD5
46a734c16599d1cb41fac1fae85be9be
SHA1
88b57e7e5db0f6060be5c076c44dd5f433e78a77
SHA256
22ae1bfd7ad8b1f51768e3eddc65b92e378c1390341c3068da69bd7934dd4984
SHA512
56a1fa6e34f34cdbf49b29a109a0dc6c42fb2230e16f46b4546df7379ab6ec6a80c6a5b3fda35f615c4d46320ac188c265911f313a1d3e5bf92c15d2652269d4
SSDEEP
3072:3xSG6JufSm3qBJmiDuVIXnRrQjoILywfOyo7/IyHLrjL5W/+drP:hqWSmaBkiDmJoILdGyo7/IyHjLtz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ