Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4bfef2ace149301d3f4a1f3af78394eb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4bfef2ace149301d3f4a1f3af78394eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4bfef2ace149301d3f4a1f3af78394eb_JaffaCakes118
Size
236KB
MD5
4bfef2ace149301d3f4a1f3af78394eb
SHA1
caf12864dd35c616450e282abf44ffe6c22c46c6
SHA256
641c2a37b4379f955dae2a15f3737e146e2aaef05d979e9d2ad68d60a629d41d
SHA512
d913532a57bec564f7ef064e8053a5589a70f7b891573a10b6e3d79b17c4beb6a22c0a57da0b004c5a276c57910c44d71fea3574fb1e480e80ef79f6b2cdea08
SSDEEP
6144:p03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBvHKeATi:pc1udnLSg03ymK2Ilm1F4a4kVHKjTi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ