Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
49fa84e71b7a5a029cbd41cec164af94_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49fa84e71b7a5a029cbd41cec164af94_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
49fa84e71b7a5a029cbd41cec164af94_JaffaCakes118
Size
316KB
MD5
49fa84e71b7a5a029cbd41cec164af94
SHA1
fa89a402064636d39bae452a89fe2f65b8ea3b32
SHA256
530883ba44fb6319d076fcd3b33c49a24a7d8b6e64598c906503092cd8067ad2
SHA512
eaf5a2ae625103924cdcf9f014bf98bbbc18f96e3425478c7cbc64aeef1ab577c3b15acd0802f9a4deedefaf603569f0d1f9362ee8f973a675552d2a8b49478a
SSDEEP
6144:8JiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hpAgTPXaO6aUFpbCwFy1QRnKtXF2Qo:842vRlPsBvmxzC/GQVpTqbDFKQRnKtXs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ