Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
767438be4fe8696f4f04b4170e8ab527_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
767438be4fe8696f4f04b4170e8ab527_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
767438be4fe8696f4f04b4170e8ab527_JaffaCakes118
Size
226KB
MD5
767438be4fe8696f4f04b4170e8ab527
SHA1
a032434de5cdb212b02dfefcaeead9f3d71df03c
SHA256
4ea6de3d010b9fc67e0b8f4501d278dbba010f92cf5fb86988e7f58217cc7bf7
SHA512
404eb2f511461b1a399502c0493e18869b1c9e9b500f0c1292c3effc48a11fe57d0b411ff81002bc53dcf5f8b6a81876d87de400649ddec769ca054b613b73f7
SSDEEP
6144:Si76VJ5rAnZht81P0YArDtPqDONC+AJH9A3r/l1d15N:l7QJ50Dt8FPArDXfAPCNvN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ