Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
667d92ed11194e4aec8f61a825acbd95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
667d92ed11194e4aec8f61a825acbd95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
667d92ed11194e4aec8f61a825acbd95_JaffaCakes118
Size
200KB
MD5
667d92ed11194e4aec8f61a825acbd95
SHA1
e7d659afc9a27a07c031f29c28c9448482ea2353
SHA256
1c757320dabcd9da9bfd29096898b86421fa168f7fe3ed12607a82a58e684d24
SHA512
2a207816bfc59ee67f1f6b7517029d522881b4ddd22beed440516781f29002e8a64b0f8ef025a1b40da45c3519d692ec860c2ef0b4654f84df1311366032d31b
SSDEEP
6144:g7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRWRN0e/9:g78AqbaVcmAo7cGNpwCi+eQZWv0I
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ