Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
47b478a45e76fe7fa0201261d8ef082f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47b478a45e76fe7fa0201261d8ef082f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
47b478a45e76fe7fa0201261d8ef082f_JaffaCakes118
Size
230KB
MD5
47b478a45e76fe7fa0201261d8ef082f
SHA1
ca61031635448fac0c9f35b2ac96f99209f2274c
SHA256
41565401d87e718707525433f180d1d543fa11dfdb8f5418ab57e02eb195517c
SHA512
b0a215f13a4a371e3475d9b480e4cfe0223cc3b5979c3aef147cfa89901cc953ac162ab9f3ffb990756202a532f05ff843753aa55429d2ab93cf6f0e257a7e34
SSDEEP
6144:RpF21YQS/6P0aZtZQ0Lv5JagvD/eEetNvB:/k1YlS5HZQ0LxJlefvB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ