Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
75ca26fdd3d05bef2a6945f06d98c945_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75ca26fdd3d05bef2a6945f06d98c945_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
75ca26fdd3d05bef2a6945f06d98c945_JaffaCakes118
Size
200KB
MD5
75ca26fdd3d05bef2a6945f06d98c945
SHA1
79b54888fcfd7a382bc91a5608cf8351e92e644c
SHA256
55b88c7c954ce689b4cd191b9c7b235af8a661d6b63abeba2b24ffb364743c98
SHA512
a2a63a82ff23d1da34edd802797240102180059fa900dbe2e7a3ad8d8e5f09ab3a6d9431ab01dd0c374b51373cbe0d1623e03cd0bb74d3c9e09ac29d19236566
SSDEEP
3072:nbdja9frMEgyP6GJ8bVesuY60K22dTr3/5V6334ceOeO0y97iGDoWn2pH54CEON0:n1uTMEd8Al3/j6nzzFhd7g+4W7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ