Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8aac5d19a6684659ca8ca33d5d3a1a12_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8aac5d19a6684659ca8ca33d5d3a1a12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8aac5d19a6684659ca8ca33d5d3a1a12_JaffaCakes118
Size
228KB
MD5
8aac5d19a6684659ca8ca33d5d3a1a12
SHA1
ad9c07739ea5aa5d6285f5151014f8355af01491
SHA256
fd4e6897854c7615fb2cc817fb46428066306389645124970c155a53e85d8e2c
SHA512
cd677baae169b9983d1c56ed79b42de6b69eaeec8dc0590ec143b0437f9cfb50e19866e4bd9631d7846db60b3ac305547cc8c5d60d8ffba9361c5dfa81b8df21
SSDEEP
3072:HHa+w4iRymxWstCvbSxWqCS4KSleWFXVmfuePuw5RDCV8aQePh9u/pxSpgNcUyaC:hWtErWIleOnCTozuxUgNXyaNL6tIor
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ