Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
616d0dbe0addd19bc1b016a6337e0d91_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
616d0dbe0addd19bc1b016a6337e0d91_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
616d0dbe0addd19bc1b016a6337e0d91_JaffaCakes118
Size
236KB
MD5
616d0dbe0addd19bc1b016a6337e0d91
SHA1
1f8f9d31d93b1020ad833bb400c929048448ecdb
SHA256
29bd42018f4483e8059c7dc6254e37640ab22f1d0717ee19bd4f4a494f152096
SHA512
efb9f788e4eb68e6f3488dc570b6e0c90349981fdb97cff82c34362dd7aa2a41298cf8026d909dbea38db3d877d4612b17033c11bd82c2acd44cf0eea4d8b2d6
SSDEEP
6144:E3kOMeaavF17EP6qyqsavlsGCj7V6+opww:0BMeT17zJavepj7VFopww
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ