Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
47a762dd6d1c83366c487274b5830281_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47a762dd6d1c83366c487274b5830281_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
47a762dd6d1c83366c487274b5830281_JaffaCakes118
Size
236KB
MD5
47a762dd6d1c83366c487274b5830281
SHA1
8c69faf661fabdadfe8e0ea898a5d0722969a553
SHA256
8fb78e70df776d0add7529c63b95f50bfdd83f65a0eac2f45e7c98df5863d49a
SHA512
505d8da71656b183e7120cce1af5ac188d02ee27ec379267dc14f80cdbd330ea82f4114f244fa2a0022e24883a9c27319f35c6825a0b10c729d8339c5140d1f7
SSDEEP
6144:303XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB+qB+j9fiK80l:3c1udnLSg03ymK2Ilm1F4a4kEWmPxl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ