Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8846c8e1933c8d3c703c7e15ec49e09b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8846c8e1933c8d3c703c7e15ec49e09b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8846c8e1933c8d3c703c7e15ec49e09b_JaffaCakes118
Size
236KB
MD5
8846c8e1933c8d3c703c7e15ec49e09b
SHA1
de41d20b2230b02f8fb38b81157dd7a93b750487
SHA256
d78ae40a4ad73ede1d1b8987e00c093bb66e80c2b99305b407af84c549e9c8f6
SHA512
8a25198ed8a9e3f65774be6aad671d06d212ab34eda19ff774c42917d59a056ac1ef6763eba79eba26c722965c4bdeda159ca307bd8d3b3d0178d02d25d59f4e
SSDEEP
6144:703XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBPCvPVEv:7c1udnLSg03ymK2Ilm1F4a4kQvP+v
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ