Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8c47e5674519d4cb01e058f0d9a72e36_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c47e5674519d4cb01e058f0d9a72e36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8c47e5674519d4cb01e058f0d9a72e36_JaffaCakes118
Size
237KB
MD5
8c47e5674519d4cb01e058f0d9a72e36
SHA1
b2bf9dd91be23d4799500bb0831a1f22fa91699d
SHA256
ea1a1f0f5ff87454a8e5b5f449677c8ffccabe4a7500f333c546d79c0f446bf1
SHA512
1bc8488e316b15429b3a74796c6c312dd7abfabf1ace4a13fc762d40c75f979bdf9b73727ca008e359f3de1619d17ae9dcb398ea657b692b7d3a350d3d1ffe2c
SSDEEP
6144:I03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBFGY/ulQ:Ic1udnLSg03ymK2Ilm1F4a4kyY/GQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ