Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
9579fe2277a35847a94571875f81beee_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9579fe2277a35847a94571875f81beee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
9579fe2277a35847a94571875f81beee_JaffaCakes118
Size
220KB
MD5
9579fe2277a35847a94571875f81beee
SHA1
7ac07c2e3a1f2e46ab4bea2c9453917d7340d827
SHA256
c0c7c622635ecf4b4362c61fe25b2d5741d37d04385ea5b304f26497c920042d
SHA512
20c2526eff2e89fc41cfc91a8e949b8d48ea373e85b86a2a39ee6330e61c15fe5d4721a35ad454dd8318e90fe2bb6991952e17e342bf4624f3eaa1db7dd9fe38
SSDEEP
3072:AamX3gyLJaOtz/xB+cHh42GZ+aJz4FYUNdwQzBw+hLCat5JUneZqdqjuiZr91ge2:SXz7FdGwaC2Un/MarJUn3Y9Z4g
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ