Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
5ecb6c4bcb260c9d6aabebee8770ed09_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ecb6c4bcb260c9d6aabebee8770ed09_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5ecb6c4bcb260c9d6aabebee8770ed09_JaffaCakes118
Size
200KB
MD5
5ecb6c4bcb260c9d6aabebee8770ed09
SHA1
b26d0ba6af03613c7fd8c1cbe21ec415d8b1825d
SHA256
1db028a8d7615bafd6b03bc4b4e79f8d9456711d52b8dcefd09c3298de56da9d
SHA512
de963f3207094b7205fb5310814ae0dabfc5b0d167dbdfbc99b7fd64ad0177c0cd56ca3c2c2c1df6579f755007e4ce3484b9456dff937fc7fc6aa7a4b3b12084
SSDEEP
6144:M7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRETqDu:M78AqbaVcmAo7cGNpwCi+eQZIqDu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ