Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8e0fe7d995ba4f9b1c7e81a4523bc399_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8e0fe7d995ba4f9b1c7e81a4523bc399_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8e0fe7d995ba4f9b1c7e81a4523bc399_JaffaCakes118
Size
236KB
MD5
8e0fe7d995ba4f9b1c7e81a4523bc399
SHA1
a01c77a6606461f2819c1183139cc66788c9bebd
SHA256
7319df13eee0d58107daaab093e7a64c1014a19f7200a5fc42aaa293c194214c
SHA512
4c6e7d5b76a4ac70df4ef235edc33f86d10f94dc75d0b05af63f3c067a22a993a9947ef9e89e1b1fa2622ace8df2b99f3a79ec4f0cfb74aaf351c15310fdc22c
SSDEEP
6144:l3kOMeaavF17EP6qyqsGqTFk+bVz3YSkyw:NBMeT17zJGMSwl3YEw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ