Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
768b19cd5e0deb66889066e679367d86_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
768b19cd5e0deb66889066e679367d86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
768b19cd5e0deb66889066e679367d86_JaffaCakes118
Size
236KB
MD5
768b19cd5e0deb66889066e679367d86
SHA1
96e728e17c5211f9e1105a95af04896a41cdab3a
SHA256
264de166a75ad957fdf263ad315a619b9bcb598334dce782aa448ba0d70a12ba
SHA512
cc051e230dfe09288e585f3e727df45797adfbd622e117acf1cb82e055a113cc28bb9ca041b231c43287d7ff9aeb152c95fcb82b09b0072593f984da9659f98d
SSDEEP
3072:WlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqszK1vKnQfTQneANj:93kOMeaavF17EP6qyqszYcrnesrv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ