Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
48715a7fc84da783b2e049458688a987_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48715a7fc84da783b2e049458688a987_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
48715a7fc84da783b2e049458688a987_JaffaCakes118
Size
241KB
MD5
48715a7fc84da783b2e049458688a987
SHA1
797cad4733ee28f94f6329319367f4335d20fe56
SHA256
0ff4e1482db0a9bae975f024b0f3b5fa95d7d85c47bf80dca69b94227b18f872
SHA512
55c49c61b6896b99986d1610d5dc06504c14d797209142e8215c1a177e2d9d8608be08ab62202f83e9b082a10dbbc522fb27c780e0835db52320d2c29194b5fb
SSDEEP
6144:/keENDvTSn2SV/GuhYdViC7X57+nMrElUE6r0a:/NEND/k/GLPX57+nLlwr0a
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ