Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
855c36a2addc2083c0c41a227b990bed_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
855c36a2addc2083c0c41a227b990bed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
855c36a2addc2083c0c41a227b990bed_JaffaCakes118
Size
236KB
MD5
855c36a2addc2083c0c41a227b990bed
SHA1
44f43e806fb34eb743ef1d32536f769f7343d5eb
SHA256
04929b66e3963a616d38265b0b45fc20fdea12f5c548f7c11dc0903580842c8d
SHA512
e6cf9a964e7109c9ded60f394a4d6e77e7f8976dfa58f89c08c271b53d4fc4d81ea3b2edf0871413aadee39dd65cf31f0447cd06eaf0f1b45a3b6bed49ec718e
SSDEEP
3072:flELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsUI/3YKz3t2LlV12:M3kOMeaavF17EP6qyqsUI/3Y4aHCN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ