Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
945adb2474aff91d77d94e6a6886873c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
945adb2474aff91d77d94e6a6886873c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
945adb2474aff91d77d94e6a6886873c_JaffaCakes118
Size
236KB
MD5
945adb2474aff91d77d94e6a6886873c
SHA1
a4c010d8ac4aa41e42e7231f5f43e95b8ddcaa59
SHA256
30291c543d2a948ae7bbaa06d666440f8dc53ebb32571d78613355140744a6e8
SHA512
7d54523e9dbc9f02de82306a83e56b90c385ddc1accfd902355e0c4b124b18e68b180045bf12276f8f20c9c535a45fce0d79a912bebb817e12f35a4951ecea97
SSDEEP
6144:F03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB+G4/U5:Fc1udnLSg03ymK2Ilm1F4a4kcG485
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ