Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
648812d79630ef5488995c949d92d72c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
648812d79630ef5488995c949d92d72c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
648812d79630ef5488995c949d92d72c_JaffaCakes118
Size
217KB
MD5
648812d79630ef5488995c949d92d72c
SHA1
11d3b049f073a2097c02c9ad0978bbea361b1b49
SHA256
f722bebefe412154d45402ee301c69b5fa84666746026514355ebe2ed63ab6c6
SHA512
6c142a7666d50e0bf9c5cfcb27703e30486fb9dfdba729ce0841d7f133a0d478f4221747ed785fd99c90b32d41180321a6b79259c900e99e14a21074cae79bac
SSDEEP
6144:gWTwl/5AtJbJIFtTgVnIY6qnI5U94TH7I0GUFq:gWTgUYT8IY5hQMHUFq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ