Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8311f616fad1b8cda9f7bdc18b53bf0f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8311f616fad1b8cda9f7bdc18b53bf0f_JaffaCakes118.exe
Resource
win10v2004-20240730-en
Target
8311f616fad1b8cda9f7bdc18b53bf0f_JaffaCakes118
Size
228KB
MD5
8311f616fad1b8cda9f7bdc18b53bf0f
SHA1
aa2821d9cbb6dfcef5516d7b46527f6f8e28bec1
SHA256
58703c8202c89fd2fbc35fcd9de37f7841a57ac76a1b141599ff964588a568d2
SHA512
9c5cd8a45ebc6cdc3c05fbbe87fff59c4e7b58c756aa73ca98da9ee27f157bddf785a1327e071cc9229b9be76900861e58dc6234add67880431cb5f110fd9985
SSDEEP
6144:54Q9x2N2h74vSmC/eakYkJ9afR+9ge1LisQOcNeS5hzem3:qQn+vSbkYkqfRNe1LiN/b5hP3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ