Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
87631fe570d261b69bd1f505b40f6341_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87631fe570d261b69bd1f505b40f6341_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
87631fe570d261b69bd1f505b40f6341_JaffaCakes118
Size
241KB
MD5
87631fe570d261b69bd1f505b40f6341
SHA1
0fc280bbd423379d628fbd2d6f6b3063dbbe59dd
SHA256
766eedcafadd8b94c2a37712c4c419c2f5ea33a4473c08cfb67f69f503020867
SHA512
f89e5cad62342140fa8349ec82d15d867c617d6641f1fddb770f0113f5d5ca52daf9869e670a14e41ad0f4af5d21f3a22ee3491d7355b3b95e59d43f7e4c10d9
SSDEEP
6144:fkeENDvTSn2SV/GuhYdViC7X57+nMq+v3nP9Z6z:fNEND/k/GLPX57+nev3Pmz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ