Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6041372ecfd3f4cbc267dcdb18cf55e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6041372ecfd3f4cbc267dcdb18cf55e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6041372ecfd3f4cbc267dcdb18cf55e7_JaffaCakes118
Size
241KB
MD5
6041372ecfd3f4cbc267dcdb18cf55e7
SHA1
86b9e25c6666c7615ffce697647865d7eb433fa5
SHA256
474441f22a389ab54e00887f1ad10e36c22ff561dfc59317b54dbbfa756de2d8
SHA512
4c557d56ecd245e7c774ee19df5ab6d98acaafdb84cc5a443cb276fbff1552cabfb7495c0b7232e2b331e78c8290f06d459992f1a2f5aaa8cb14dde0f5a425e2
SSDEEP
6144:+keENDvTSn2SV/GuhYdViC7X57+nMGYqHwgiUlBF:+NEND/k/GLPX57+nRYktBF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ