Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
9598cc0b35a8921fa4f29c96f77a506d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9598cc0b35a8921fa4f29c96f77a506d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
9598cc0b35a8921fa4f29c96f77a506d_JaffaCakes118
Size
208KB
MD5
9598cc0b35a8921fa4f29c96f77a506d
SHA1
aaa14719543410fdbcb02b8d4a998c2573cf4058
SHA256
f470198dec159dbad839f03eefee195e23fa72dc0bbe575280d956a11ad79eba
SHA512
76acca12a41fcf9af26c50a29021764ef8fa9676d501aedade05f6592b36fc4e7b755226b95f024450273e0b44115c205e1052ca8a8d846cb08d87a7e366dee9
SSDEEP
6144:QozMw1Zn/OgHRmHwffT39pcJ/TVQ4zZHEai/0Qf9w:Rn/3vf+xQ4zpBwVG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ