Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
86cd700435b6d540cda08d8acab5e9da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86cd700435b6d540cda08d8acab5e9da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
86cd700435b6d540cda08d8acab5e9da_JaffaCakes118
Size
203KB
MD5
86cd700435b6d540cda08d8acab5e9da
SHA1
821626a14912fc3fd33b095cf24abcec91b1240f
SHA256
148fa65b723bbcaed2a5aaaa0a685f966d292a581146fbd1abd5a9a951d54c0a
SHA512
c57807ed96fbbb725decf32991cefab239431eec65c814fa527fa4d1791ff208e1c390cb0b7a8a6b39ecefcd440dba35facfa9426a3202b43a267353ca6f066b
SSDEEP
3072:whGJR3yV3O8CYdhyp5s2KoNPu56NuzdYSTnjFb3uqAlUMxqRj3geDakJbppGbfeZ:pR3ke8NEZrBxEYAjFbejlRMDaGzh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ