Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
866674da9f2a04bbd7355805bd126882_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
866674da9f2a04bbd7355805bd126882_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
866674da9f2a04bbd7355805bd126882_JaffaCakes118
Size
202KB
MD5
866674da9f2a04bbd7355805bd126882
SHA1
84e856d473652ca797f93b12c715886e85dabf81
SHA256
0f9a515208e0ac58529995c40a8cc85aa14a47d218626d3aa8824e4971d48895
SHA512
d0a6e773b36e5dab449a15a2f70a36b60d8714a1d1ead93b991b7eb05d3fe2b0d939c05bcc1545a50f065d0bf48342ab1f7be655e8de9b13d9fa56b38ff68b9f
SSDEEP
3072:cz5V04aH+/F9alhgfDpilQMCqQrZVOpX2kN+whLSMf8fZXv4aS:uQ4K+/F9aDg9HMCHlIpXrTdSs88
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ