Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
742a311ccd58c0af1332f2b3a9b0ef6e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
742a311ccd58c0af1332f2b3a9b0ef6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
742a311ccd58c0af1332f2b3a9b0ef6e_JaffaCakes118
Size
205KB
MD5
742a311ccd58c0af1332f2b3a9b0ef6e
SHA1
fc1f1a44940049eed795c7b34bde0d4f6785a079
SHA256
d784e529cbbd8333799052ac0784acdf58bd150d52ad99f8402c56cab8ad2a43
SHA512
ea5b6109b6a8d7377b38164f2980a765c3fb638a36369f122c1e8996af518515d4321e62c32071203ec7421087d3406304168f92ada7501120bb999de4aaa6bf
SSDEEP
3072:ujj0hnS0Pq9iFlfXFbrSCXe6A9b39XYKgajbLD8FQ7h1DEZBxyrn2KW7QuU1Qm6I:k0hfPqsPFbrBLAxNIKgUgk16yrn2YXe2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ