Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
884aa9c16ee8bd0578f216031ccac697_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
884aa9c16ee8bd0578f216031ccac697_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
884aa9c16ee8bd0578f216031ccac697_JaffaCakes118
Size
205KB
MD5
884aa9c16ee8bd0578f216031ccac697
SHA1
fdabae9f1c54e399bda691ed89653dd82f35ba02
SHA256
d8239a2457f89e81f6d68b8429e73d6a6b8e0fb3ee499a87945c7325b09d4dcd
SHA512
0ea13c74aa20a3b70b07125ff548a9f1c7f0d0b1fdcdc2291e5d641fa53aa0d1323a62f582d19894fb26679598fd7313ce94611b5251a2df606215ff13712906
SSDEEP
6144:GKqQGZ33GYS29XS3FsJeYFLJ5c2uc0RWnkxHbYt9v4:Rq1Z3S2WoJtuXWkFUrA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ