Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4bfb3da48093fda2e3bf6d75832eb03f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bfb3da48093fda2e3bf6d75832eb03f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4bfb3da48093fda2e3bf6d75832eb03f_JaffaCakes118
Size
236KB
MD5
4bfb3da48093fda2e3bf6d75832eb03f
SHA1
7a4a6f14f4ab9f74f544d2598cbbdc2e3e1f7a4d
SHA256
751657c6d6954109bcd89a6513eb0215aeb0430537b1028837d696ac540f6dc5
SHA512
692f1bd5c4237292d6f35bebf13f71598709610d7ccb923c32c552583dec44d549d67d7c6ad7980833819c1f8f1b15fbf825fdff28c1b4678327c646a54c8b76
SSDEEP
3072:llELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqseNG8SboFL924MDK:u3kOMeaavF17EP6qyqseNG8SUF8/c
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ