Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
5de9db83bf8e468fe1ec712c056843de_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5de9db83bf8e468fe1ec712c056843de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5de9db83bf8e468fe1ec712c056843de_JaffaCakes118
Size
205KB
MD5
5de9db83bf8e468fe1ec712c056843de
SHA1
af305e9577892c45af9207bbb0d887d7b868f799
SHA256
fa3be3585e622e80c82bb8ade9466718997b9f78aa14f6c0ef4ebb8f1876426a
SHA512
7275ed56231fc8167bca0786b0575bdec546025da780881cf238ae2891579a6909e2b28fea76fb0cbccaab796fe04afa80bfbc026761c9cf81352fac3e54a34d
SSDEEP
3072:qjj0hnS0Pq9iFlfXFbrSCXe6A9b39XYKgajbLD8FQ7h1DEZBxyr9BP7S2CiMq:I0hfPqsPFbrBLAxNIKgUgk16yr3Pu2CQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ