Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8a37f082eddcf75a576bd9f37288579f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a37f082eddcf75a576bd9f37288579f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8a37f082eddcf75a576bd9f37288579f_JaffaCakes118
Size
228KB
MD5
8a37f082eddcf75a576bd9f37288579f
SHA1
84a7ebe17614e9421b4759d8a2ee8388d59a2271
SHA256
b7ed580b8e9744d6d4fcc6f9e39e2844731cc51639059b7ac296ecf38dd8e852
SHA512
41fd33290961d664418b553dc12974d4bf72a8cf1711c180e817c80c73ffc83ff6be3fac2b8358b70d80f5c492652a2c2a75acc7326639bd4e304f24f6ac4dc4
SSDEEP
3072:PQfRqdESOA7VLn3WVhTDURKYNOI7IZKVTT4h2UBmsWr3uAN/SB7lG3WKG4POrlSW:IbizmVhTAgZKR4wpr3N/SC3Wt4YP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ