Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
606d3487df696c4711decde05e99c19b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
606d3487df696c4711decde05e99c19b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
606d3487df696c4711decde05e99c19b_JaffaCakes118
Size
241KB
MD5
606d3487df696c4711decde05e99c19b
SHA1
b28d1a41982cc21bca51f589bab18b1f758461f0
SHA256
07a3b3a1aaa2cecdf030c33d7789870f95d22cd6db907089cb98160d1b322e6b
SHA512
e3f388eac15ed5f4f1abe45cd2be6789b42b20bd42aa0187034a1678253f1880ece429c1a104d798ec5dc90ff088ed4b1051b42585e172f687493b2524fbf8f4
SSDEEP
6144:ykeENDvTSn2SV/GuhYdViC7X57+nMOoC8foqVAsV:yNEND/k/GLPX57+naZAqVAsV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ