Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
862c150cae2ebeb844c629af89900236_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
862c150cae2ebeb844c629af89900236_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
862c150cae2ebeb844c629af89900236_JaffaCakes118
Size
201KB
MD5
862c150cae2ebeb844c629af89900236
SHA1
e0824b1a549cfaee529ce7401e9619b713f883c8
SHA256
425b838c4eab39092a1becfedf3384bd3db55a5839cd6a92d45c79f1e9f3aa02
SHA512
1fd9b6990bdb14f03ab07e999338cbc409bbeefb2e45f64a0eca08068137daced2f14f7ccb667bd6073c31420f49ca69bab400d09d49282eee5273226c9fb8ca
SSDEEP
6144:rD2JXPXyZe2sgp76QGfHCIjEcqRT+9n/c:/2J/oEHCIjEP+9n/c
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ