Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
4dc2c9bc48aad3f05c5eba8834ad4721_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4dc2c9bc48aad3f05c5eba8834ad4721_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
4dc2c9bc48aad3f05c5eba8834ad4721_JaffaCakes118
Size
202KB
MD5
4dc2c9bc48aad3f05c5eba8834ad4721
SHA1
c86cfbcde39f21f84f1dc30805a6bd6a7979b63b
SHA256
13c7107f29f8453ee3a77e4f634900b953950918193d3edddf13e3b5296190c9
SHA512
66cb9e19d714ca405505c374f3a246c238fad5cf1f0e23f8180d74cf71a9172ccf4b9e5fc7821d35d7b0d092b7cc8db099a306e5559902b2f58c418ea7e9b89e
SSDEEP
6144:OiOcIXzm0+kxjqaiI6nt51zrOpw6P5b8x/WsURCwx11:OtDz+I2aiIa51Ow6J+/WsU881
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ