Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
94cfe4dad99d0644bd90f91a950cd2ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94cfe4dad99d0644bd90f91a950cd2ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
94cfe4dad99d0644bd90f91a950cd2ab_JaffaCakes118
Size
191KB
MD5
94cfe4dad99d0644bd90f91a950cd2ab
SHA1
32dc752143c0028e32140bd5684cfaeeb79bf86d
SHA256
4df2ed4b74b55dd9be3431c014728d7cdecdf9b5669a19a2c26325332765b2e0
SHA512
403fb6a1f0eccffa6f8decbd564d8fb454fe6e235b6a22ce90acee28691762794d83bd14599c372d5fcb7b67bfc58bc0e9675671434107014b9190dafce311a4
SSDEEP
3072:HVKhO5BjuQmorMbQuXIrQirJVBVAci6X76GP/mA/c1qLqQ1BSNTJSlefqf:kc53ME+IQiNrVA86A/mSCqO0BiTJgf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ