Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
68bd34b72621ae0d1cc560cd20817f92_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68bd34b72621ae0d1cc560cd20817f92_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
68bd34b72621ae0d1cc560cd20817f92_JaffaCakes118
Size
207KB
MD5
68bd34b72621ae0d1cc560cd20817f92
SHA1
c7449e82c050d36545b0762d58e4be60e6136f5b
SHA256
63b28393028bb5ef4c8cdec880e554ad5aff831a1ac002501bdefab3c3794f52
SHA512
82d68ddbb0e1768de8d2eec8b6bbfe194cfb2b3304343e911468ca7f151b0b451c5ca6bfbd03dafff06961c42ecafbe245828bf67e90a693e4a4de295bd56bac
SSDEEP
3072:rZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3Sub7xOOr1cv4/3NB9QW:kpbaeyWECcp9AcFJ5qIU7xOe1YgGW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ