Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8a3a44c0e79848f43f8847bc70ce3ee2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a3a44c0e79848f43f8847bc70ce3ee2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8a3a44c0e79848f43f8847bc70ce3ee2_JaffaCakes118
Size
236KB
MD5
8a3a44c0e79848f43f8847bc70ce3ee2
SHA1
f4d11699804bc773f6c1d7c3073dd41c0ef27414
SHA256
d5d18fe0f268a33da64b56cea496d09aeb444afc17b314650c8c15fa700e4178
SHA512
e1772a24044ccc098d05c95620ce3db4dd93ddcec1338e6546ae2475b747f7e6777f5cdb24a9863a006d9c3b8108e0284e8d92812515f4b89074ec13157b0c70
SSDEEP
6144:T03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBBBpiGCXrBiFu:Tc1udnLSg03ymK2Ilm1F4a4kHizrBiFu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ