Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6188cdd4742280c8bc16e8403c36c762_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6188cdd4742280c8bc16e8403c36c762_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6188cdd4742280c8bc16e8403c36c762_JaffaCakes118
Size
205KB
MD5
6188cdd4742280c8bc16e8403c36c762
SHA1
c075472d4fcc078e459ae0c78191b8dbfdd62c52
SHA256
2e30ac07b8d20367a64cfa2e2989b2185f48b92bc0401652635dc8a10f12ed50
SHA512
4996114bcaedf6663efa997cc99323d8f8ebeb9f070d245f5046860fc87d4c72de520faf2206e56779bb70a8525c24a20719f30ac54327559f2096eae60689a4
SSDEEP
3072:4jj0hnS0Pq9iFlfXFbrSCXe6A9b39XYKgajbLD8FQ7h1DEZBxyrEG2PVz73JEMeB:m0hfPqsPFbrBLAxNIKgUgk16yryt3JFq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ