Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8ac16ae138cde098075a68a984c3fb50_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ac16ae138cde098075a68a984c3fb50_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8ac16ae138cde098075a68a984c3fb50_JaffaCakes118
Size
205KB
MD5
8ac16ae138cde098075a68a984c3fb50
SHA1
be9c10256974b59ed9a1289bd0fc12b59f17617b
SHA256
689477534b9bc4e11f4db073a93867f8e56b51dbc636d748b6e4207e89daef5d
SHA512
1f401773e2ed5c6f762eea24b797f27ae805e08d24132268970028fae70a5dce76c784516d01a0156725212199947ee45186dfc5f153fb1578d719894b9bccce
SSDEEP
3072:JwECxF+ze4WcCks7/m2Hq8u2EehJvuUY9dM8ULpLNoJHLG4E9hqjRQWTifxTZoXO:9zecAPupYvuUoYpRZWjR/TAxTZcZI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ