Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
7466c310c2e67f8608faa3d2a3681557_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7466c310c2e67f8608faa3d2a3681557_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
7466c310c2e67f8608faa3d2a3681557_JaffaCakes118
Size
241KB
MD5
7466c310c2e67f8608faa3d2a3681557
SHA1
af6a9e0bd999adfc02f383dda237e92bea3b51dc
SHA256
11b1c852be36ba70aa6cb8fcf68d78c3a28fd8199b7ea4821523bce7d10f735e
SHA512
c65837c234bf349671b34de526347d445ec3b47105227a1bd2f1e2340803a5532c4eb6a854473be6aa850ed8f67b2d8aa6ab7a0b2b96862b91dcc9cfce08f9f3
SSDEEP
6144:GkeENDvTSn2SV/GuhYdViC7X57+nMGBRDRhQL/m:GNEND/k/GLPX57+nJRD4/m
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ