Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
608485580550b317ab7e3af38569552f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
608485580550b317ab7e3af38569552f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
608485580550b317ab7e3af38569552f_JaffaCakes118
Size
207KB
MD5
608485580550b317ab7e3af38569552f
SHA1
35a096a29cc619716a8062431f2631ca6925b916
SHA256
c8cc8feb43fd179e01a75939cc2785a43e9a9b52b68ed0bbdd42e6d2e80dd25a
SHA512
ed1c64c7e82f13f70a6a605081853f8af4285976a1f32e43d1c1e875a3601585d1a2b95b280a2ecab6a27f04572d52fc0d7e85ca3d06ba37eb143a370005adb7
SSDEEP
3072:jZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3Sub4rYBLgzdT2eQ6f6I:MpbaeyWECcp9AcFJ5qIUEigKI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ