Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
59d698a9eeaaf7aef8a193c7f8e9c7d0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59d698a9eeaaf7aef8a193c7f8e9c7d0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
59d698a9eeaaf7aef8a193c7f8e9c7d0_JaffaCakes118
Size
142KB
MD5
59d698a9eeaaf7aef8a193c7f8e9c7d0
SHA1
eed362ea4772f693716ea5fe5cff915cc5270bd9
SHA256
2efbc3764274796593fbda9620fae5c7104948ec5a95c42d778b2fe1122c6fb8
SHA512
283b36fa19736711823451b2c67e84407420d0f4a130f35d3f10f264633f9c438e2e4464f80e965a59d7641f9b4135a397437239315049b5799ea22463d06fc3
SSDEEP
3072:sP26s+SnOvsY8Z/2Gqq5uwHzzRwCHE8eHsvBFMsU3YR9BS5tIkw6Cxarn/:+26qnCsY8ZuPIuqzzRZHY6gs+tIZ6Cx8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE