Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
776b8459552625bcd3654d6a26f374c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
776b8459552625bcd3654d6a26f374c7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
776b8459552625bcd3654d6a26f374c7_JaffaCakes118
Size
234KB
MD5
776b8459552625bcd3654d6a26f374c7
SHA1
1e3746364bf6abead6767966e449b0e9b2d47d48
SHA256
59df85085aba1a2b50bad2420add6f8ab82219257dc2f733b49b3f37490a63b5
SHA512
0f122e266d12a340823765fb83ca4a8215f4f39147263970dd01749d511ed564c10a306e4df3d54abfe74ace508a78bb810015a2b1216423f03d563d3733a81e
SSDEEP
6144:g7n5WPqr2GTsNs7tbYvAWjVYjAmAcV7+VYtGy:g7n5WPqFsNU8XV2POYAy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ