Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6297be5446d4a8764283d2c79f58fda7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6297be5446d4a8764283d2c79f58fda7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6297be5446d4a8764283d2c79f58fda7_JaffaCakes118
Size
236KB
MD5
6297be5446d4a8764283d2c79f58fda7
SHA1
be34b5a0c6e48804589eedfebca519d5ace2b717
SHA256
78e37617f9ad4491e693eb13eee84c5c0d507a8f02e738a7d87c5b3a7d155a06
SHA512
d1e36b441d72b23ea44eda0b1718db1c57a15d0ebef95daf741094283255d5a823d6c8ac173df282f5b45e2de1c09a7cd4e3fe0730c1b01806af88dec249bdd4
SSDEEP
6144:I03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB1dqoPAqTgws:Ic1udnLSg03ymK2Ilm1F4a4kHdPTgws
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ