Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
5b063a5003c0dce26d8b84a260fcf95c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b063a5003c0dce26d8b84a260fcf95c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5b063a5003c0dce26d8b84a260fcf95c_JaffaCakes118
Size
205KB
MD5
5b063a5003c0dce26d8b84a260fcf95c
SHA1
35a99f0014066a83f0a302a49e04cff511eb5c30
SHA256
17d13cdec8c3efcdce1786464dc9e4f381fe47eff3ec134a9484c48b18bb9b9c
SHA512
c5a07eee61d6094be3efe8d2ce6143995041a5860e22cef57b19b36be9567c0cf82a6170054bd94b4dda243bdd71f2b7c8052214bbd5dfc94fe6c3f411c94055
SSDEEP
3072:lxSG6JufSm3qBJmiDuVIXnRrQjoILywfOyo7/IyHLrjfGdHpmlK0eFxCA:HqWSmaBkiDmJoILdGyo7/IyHjuH0Y0QZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ