Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
700b6e992ace3f28c8848ad80989258f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
700b6e992ace3f28c8848ad80989258f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
700b6e992ace3f28c8848ad80989258f_JaffaCakes118
Size
317KB
MD5
700b6e992ace3f28c8848ad80989258f
SHA1
413425518ccfc53ea47656c291e96fd2a6c5f271
SHA256
ef8fa4cbb8989f12386393962a49b1b7a8dd436eac359893ad2b520f8e75d5b4
SHA512
ef3585a977f4acc5c8eb46d7057d03f23726780e5dd6b1fa0d77572b71eefbed5d41d4fe43847c9f6a46f42af09b3225a687582aef0ada9b09b352ffd6c6b843
SSDEEP
6144:FJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hpbs1QR4i7DjgRQrvSKahE4+SAsdYdY:F42vRlPsBvmxzC/GQVpYqai7DjbKKahR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ