Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
663e3d3625e78b0746d764ef9a17dd77_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
663e3d3625e78b0746d764ef9a17dd77_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
663e3d3625e78b0746d764ef9a17dd77_JaffaCakes118
Size
236KB
MD5
663e3d3625e78b0746d764ef9a17dd77
SHA1
a0ed37857c696ab2298a87861f9a4779ebac61c6
SHA256
93cac4e0cf299105eb1fac92c9ec924dfd6ba5921d9770dbb3aadbfcf71c935b
SHA512
e3d7853311a930801b81004220f362f258b7a952395819aec59123e549e264d597fa41a4fcda30f9ac735ed01b69d560278edc4601ae97e8508d64b4952c35b6
SSDEEP
6144:v03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBmEGHO9HiRmK:vc1udnLSg03ymK2Ilm1F4a4kAZuHVK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ