Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6ac9a0918d5cd5db8c7be7b4cc885349_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ac9a0918d5cd5db8c7be7b4cc885349_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6ac9a0918d5cd5db8c7be7b4cc885349_JaffaCakes118
Size
241KB
MD5
6ac9a0918d5cd5db8c7be7b4cc885349
SHA1
fc56cc55c0650b32a97e27f932fedc8d2d6be148
SHA256
d382d3e9d9923eb6d1e40552062b32d39c616b11d4cd9bad950aa328fcd72d00
SHA512
8c6c144b0feeec4cdbf3102684f444fe45ce263a5c3f26274f1b9551fdc505ebf10dbf0a786b80351082dba8bb43bac9a33a0b8e25258e2c69b83136bf36c726
SSDEEP
6144:nkeENDvTSn2SV/GuhYdViC7X57+nMBbilFhpLPi:nNEND/k/GLPX57+nCbWTti
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ