Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6fbe5e134c31c1fe2c9c8d9404279f48_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fbe5e134c31c1fe2c9c8d9404279f48_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6fbe5e134c31c1fe2c9c8d9404279f48_JaffaCakes118
Size
242KB
MD5
6fbe5e134c31c1fe2c9c8d9404279f48
SHA1
9878eba1a354f10790b7b0d2e1670895f9ecc49b
SHA256
46034f876484b55412a54146a2ac1e6e96957241fbaa53792bce28c4c036546c
SHA512
0c97cf6e0f2074f4b74f7d6e80c02a54215e5d609301299028db1efbff3a9a8f9875f5aea5c9e3178b98d06c62c49d6649b0b896e14e5aa95691c20be740e407
SSDEEP
6144:o03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBGHffc:oc1udnLSg03ymK2Ilm1F4a4kKXc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ