Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6159a32b20800dbff4c7e11260c9b360_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6159a32b20800dbff4c7e11260c9b360_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6159a32b20800dbff4c7e11260c9b360_JaffaCakes118
Size
236KB
MD5
6159a32b20800dbff4c7e11260c9b360
SHA1
f8afb13a66e172166b1213ce7151d89a0f81ff88
SHA256
4b46c830c309ff3273a0f47cee64ebb1663c290f9df1bb326b83ef9a7f0df914
SHA512
9045344cd2d3329a92286eae8a9e2511834b8efb7aa4fdc471614a003af8eef005c87e8f2fc5b319dc58fd7de9fd9f99c7d9b4897f6d5669c8650268e689306e
SSDEEP
3072:/lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqs7ybZ3RwhrKosRRc:s3kOMeaavF17EP6qyqsubZhOK5On
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ