Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
83d39f617571da3b8c78f95f714b4227_JaffaCakes118.exe
Resource
win7-20240704-en
Target
83d39f617571da3b8c78f95f714b4227_JaffaCakes118
Size
201KB
MD5
83d39f617571da3b8c78f95f714b4227
SHA1
df7332e479f8af87a4b2a9ee910fe8c2575f8370
SHA256
91470d305762f53eed338e8941d5a7fb5a3296fbc0d0d5a2858e7408891a763b
SHA512
1e4c84f3b5302ba0fa56800770199f941a38448fa5b550ff9fd2c50d6ee491256e91dd4aa1d276e4e9d81cc8b56fa0b3abbea28c51ad83d71f582aa7b3ee4685
SSDEEP
3072:Y2oNUytQCZ3P6itmVVEC6/aPSmRPydcYcsX6rtrCpYFl566g5eJnH3Mxcgr7Hla9:YkkcYAjhLYc4K1CWe6gsFXMnrMbHN0s
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ