Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
66223eec2e12b8c7ac34e21aaa2e95d3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66223eec2e12b8c7ac34e21aaa2e95d3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
66223eec2e12b8c7ac34e21aaa2e95d3_JaffaCakes118
Size
203KB
MD5
66223eec2e12b8c7ac34e21aaa2e95d3
SHA1
8bdd1d8ecf07c73e9622617df5510f25ac03ecc9
SHA256
c9fb5ed455276480cd27d6b1a79bbcff5562669c51add8ca3e7185b890eea5f2
SHA512
27d5c1a91bde98be99330f1cb7522f386f224bf27e45c085a6a8880c7d0782edfb88c2497b2d49ec3d2375c53a9a5e810c95be56efe09197fe0a2b7b0548a0dc
SSDEEP
6144:97oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRDNqJchgGxm:978AqbaVcmAo7cGNpwCi+eQZssxm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ