Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
62aac06bf3b559fc19026b173fe372d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62aac06bf3b559fc19026b173fe372d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
62aac06bf3b559fc19026b173fe372d5_JaffaCakes118
Size
236KB
MD5
62aac06bf3b559fc19026b173fe372d5
SHA1
d1de6cf2f1f434464adfdaba14da8779932a920b
SHA256
dd86a0bed51975cbf0658d582b983521106070926e8aea7bd27204ef007ee192
SHA512
53cd9dacfc82f6e4686bd7faa552babffe443a6e14bee6e5deff9e0ad91299f788f5ec61090a279e919c7c57077817f31fcc6dfe7515a064d1554c871bfb99f0
SSDEEP
3072:alELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsNfVx9TuMByHpeoe:B3kOMeaavF17EP6qyqsfTxoUlS0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ