Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
71bf453b89df5fdda6c474c278efdef0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71bf453b89df5fdda6c474c278efdef0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
71bf453b89df5fdda6c474c278efdef0_JaffaCakes118
Size
206KB
MD5
71bf453b89df5fdda6c474c278efdef0
SHA1
921e3339ca0df6266b1e2b8df8a9a35f9027f6ad
SHA256
6037759b8a67acfd95bf181b644bfa435c1de5a7514d4ca07f75d31cb0f6c800
SHA512
e5d033f30b447629cbf8360ebf3781f3619eb6657dca279757948421baac2201ab8bed4c2113ed8213ebc5ac1bae09bba2cf84aae0c59157c3317ec0aadb9fc1
SSDEEP
3072:hEAUf4Xo3P3VwBxIQyKatuQE2cS0ivbBmp5S3Y/Aq4+t/Jnz5Fn5+06MJg:KAioMWBJYuQRBtmp5O2Aq4+tndc06gg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ