Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4def1af7ed4993a6c0d9d79e8c9d0238_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4def1af7ed4993a6c0d9d79e8c9d0238_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4def1af7ed4993a6c0d9d79e8c9d0238_JaffaCakes118
Size
242KB
MD5
4def1af7ed4993a6c0d9d79e8c9d0238
SHA1
f2b5b143fcb37d395dabe9ab7437ac23c3287a29
SHA256
032a6fc923dcf842e99583dfc28c7f6fedfe7ccd575f0e7f7a78bab27025f343
SHA512
108838ff8697eb9ad2facb9ea58b421579ff203077635a085c7899e42e55dddc3e024c24354df727f7014a7c0dd17a8fdac6064273b46cacc9e4c130a5bef7c2
SSDEEP
6144:O03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB83EKq4/EPP/:Oc1udnLSg03ymK2Ilm1F4a4kcEKq4/EP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ