Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
968fc4dab6a59b93f96d445d965506bf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
968fc4dab6a59b93f96d445d965506bf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
968fc4dab6a59b93f96d445d965506bf_JaffaCakes118
Size
236KB
MD5
968fc4dab6a59b93f96d445d965506bf
SHA1
aed319107d0d082ff9b09e29a023a98dc6c83851
SHA256
0df3af0062ad5ed72faeb34c5f37a4d03476e695f7b1393de43b82722b73fe3b
SHA512
bbd1ccdb5046ea1128b25e28a7e83755ef12cdf4b723547ede20bd97d6e2c6ef25b35b90db0532dfa8fa27a1dd0e919045cc42bb8548276087fecdc723a701fb
SSDEEP
3072:slELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsXxW/F7h7gbGAh+L:f3kOMeaavF17EP6qyqsXo/TFsrTk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ