Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
674e311a8f76d18f3f442c294c40d884_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
674e311a8f76d18f3f442c294c40d884_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
674e311a8f76d18f3f442c294c40d884_JaffaCakes118
Size
200KB
MD5
674e311a8f76d18f3f442c294c40d884
SHA1
51ccdeb7aae702b18182a0cbdac2eb4762bfc37d
SHA256
24fdf440e86aa0e097339ccc64e60a9018c02943c9231e8b3c82a8be17ab7d85
SHA512
a729c308183d98d14d5122e2c15e687532378e7676da1ef1e2ed7cd74b8c0cde0d1066034d743a033c1d301990e1b4a9766b0159087ce4d5f8013a11085b3e76
SSDEEP
3072:/bdja9frMEgyP6GJ8bVesuY60K22dTr3/5V6334ceOeO0y97CIY42BSXNfw1V:/1uTMEd8Al3/j6nzzFhhY4oSsV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ