Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6344ada974fdf149cffdeef9061f21c1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6344ada974fdf149cffdeef9061f21c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6344ada974fdf149cffdeef9061f21c1_JaffaCakes118
Size
203KB
MD5
6344ada974fdf149cffdeef9061f21c1
SHA1
50d7b5defa93232ca936d0c24b1efec427a29f68
SHA256
8014a582df46dd3ebb35833b050ec4454e84e342a2835dfffd8d0b9d854dbacc
SHA512
ba21505ec17e1b957b2d398a993aa6d36cf0b789ffc5d3186d590b7c021cffd05123afb0673687ede96e52bfa1ecfc2fd6deed8bdb7f82711ebc14d48f1b6e0a
SSDEEP
3072:+hGJR3yV3O8CYdhyp5s2KoNPu56NuzdYSTnjFb3uqAlUMxqRj3geDakJ0LDckWV0:HR3ke8NEZrBxEYAjFbejlRMDaG0kv0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ