Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
75b8825f2c966074699d610e8baa8698_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75b8825f2c966074699d610e8baa8698_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
75b8825f2c966074699d610e8baa8698_JaffaCakes118
Size
205KB
MD5
75b8825f2c966074699d610e8baa8698
SHA1
24840f2d39d624028a4d6e3e8d4bbedeb4f707d9
SHA256
ff99cdb972065bbeb35264c5d2011606824384dc2fb5d403c73074cc66c7405a
SHA512
b9668576ada66b30930ae4b9fe624017b613cd7c3ad46b0072c9c0325e57b3cae8b2c5b9344486479fbd4e7125463dfd3a3d33983c6ce1bc48474da3d2356a4d
SSDEEP
3072:JxSG6JufSm3qBJmiDuVIXnRrQjoILywfOyo7/IyHLrjFaJuv7rMrp3:bqWSmaBkiDmJoILdGyo7/IyHjF4uzmp3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ