Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
61213a9b62321da637c883c101f82f12_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61213a9b62321da637c883c101f82f12_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
61213a9b62321da637c883c101f82f12_JaffaCakes118
Size
241KB
MD5
61213a9b62321da637c883c101f82f12
SHA1
b720f5d6518bd2a020c63776d50beacc64c23282
SHA256
e749fe0c5645abc504f86586468a9a89439287b4d44dd6b47429453668f3780c
SHA512
a5a25312157f61302c4c785f12e9ae1c9797fe9bb70c0800ea0cb5a3a5c961021b1d75e1daa3e9212d801bba24438991df17a6fc1818b561786674898982d7b4
SSDEEP
6144:KkeENDvTSn2SV/GuhYdViC7X57+nMpH14a0HlTOaGpHZbx:KNEND/k/GLPX57+nw1b0HxO9x
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ