Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
60b1463cc2181eaa22f953e9716107e3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60b1463cc2181eaa22f953e9716107e3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
60b1463cc2181eaa22f953e9716107e3_JaffaCakes118
Size
236KB
MD5
60b1463cc2181eaa22f953e9716107e3
SHA1
a58e5c34023b5b5de36178584b7e58a4a2798fd4
SHA256
c0c5dd9494030c1d6ec1c7e96029053b507d44064361fdef5d619413e0decb01
SHA512
d811bd4ec5b2176ba71302a8c54eb653d3295f98487b5beba134ac0fb0c605198dd96d6ddc405fb78072dafbd791e8adbe2280742d8e41eea1535fbe16cf971b
SSDEEP
6144:503XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBMGM4nTzK/kx14kv:5c1udnLSg03ymK2Ilm1F4a4kCP4nT+61
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ