Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
83e9417f1ad5d22d4bec1f1279c2fe90_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83e9417f1ad5d22d4bec1f1279c2fe90_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
83e9417f1ad5d22d4bec1f1279c2fe90_JaffaCakes118
Size
230KB
MD5
83e9417f1ad5d22d4bec1f1279c2fe90
SHA1
5ebd11b539cc80fc0aac18e9c89ccd0b54aec085
SHA256
bdec5aae95937aaddf6b7917713f969d558211389badc04446a9b6b891f01d59
SHA512
8191ee8e9da31a313b474d22c0da44871c5e63aadca7c91c94e3dde1c1f6794ddcfd6814f9680d15534d531b53002ecd904f50f67595c798a0e1fde330783440
SSDEEP
6144:LfOOBdC1kDAwnp1D8nCl+DKkZVd2pqrujAQJCgw:LmkA10Tl+KkUpqru99w
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ