Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
81e8c852754443af8e2b3365497f121a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
81e8c852754443af8e2b3365497f121a_JaffaCakes118.exe
Resource
win10v2004-20240730-en
Target
81e8c852754443af8e2b3365497f121a_JaffaCakes118
Size
236KB
MD5
81e8c852754443af8e2b3365497f121a
SHA1
7500aa698b1e388af07b4da4861d446ddde20624
SHA256
7c6eab8cdce43e164602e2f0d387702eae63be033454331ab2c32c019ef31f13
SHA512
73e0b72d382cffc92d56cc4c3629b3507d3c5a3cb8fa0516d188d7bad16243324d6253fca1717dc3b1de2748664e990c3d958c0aead7e576a57b369e012db579
SSDEEP
6144:S03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBXxRPAH:Sc1udnLSg03ymK2Ilm1F4a4khnPAH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ