Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6625fe8a87c3455e9c46258398d90a55_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6625fe8a87c3455e9c46258398d90a55_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6625fe8a87c3455e9c46258398d90a55_JaffaCakes118
Size
236KB
MD5
6625fe8a87c3455e9c46258398d90a55
SHA1
97138c516ae4a761cd9e5cee6acfe3cfff31fdc9
SHA256
d400e90caae32cedbd4c796b7f6aa33a6a0b70f0276dd4331a48ae9b59b29b63
SHA512
e67f9e75c1369894906f0071bb25d6b9f08e2c813a1dc85c9649866dfe32291eb0b2f52d07036634b5df5f5ff8b3b4d12e7c4afb89824a0184b63ea949a0ffdd
SSDEEP
3072:JlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqsrl6dYAPW:C3kOMeaavF17EP6qyqssdYuW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ