Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
95f2ad213f64b68a29c14986472d6476_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95f2ad213f64b68a29c14986472d6476_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
95f2ad213f64b68a29c14986472d6476_JaffaCakes118
Size
198KB
MD5
95f2ad213f64b68a29c14986472d6476
SHA1
b77c4db7ab108786d45fec588c6489d3d8d9d07e
SHA256
44dca9bb7bafda36a988706f855cc51c3c2884d0e4421fb1db027293a9bc099e
SHA512
60009b0948509c0dfb7938e508836f5ad6104ccf7cea1544931c5147a266b274ef49da9bc30231074bcbada9f8f41d8a2e32da3bb1333c969ce02f897b793e0f
SSDEEP
6144:8FH2w7eJotYp0WBlkAgZiRULxwUJfALZn89GZnm:8HYotudoiRU1wUJfIagn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ