Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
974b560b27315c4cb6af387fac84f4c6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
974b560b27315c4cb6af387fac84f4c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
974b560b27315c4cb6af387fac84f4c6_JaffaCakes118
Size
236KB
MD5
974b560b27315c4cb6af387fac84f4c6
SHA1
013cf7e8393b2c49f7dabd696c3844ff395639c6
SHA256
66913a6679f2cca3a769b7b162bc1f114490cccc3ef7de834cd81444fa3f7b3a
SHA512
1d70ee2b918cd9ec8fbc6f560c886eb70586a62faf8deb94013f3267a22ac320872bf79397e1862237cc03f2d91d9ec8d177f634c2d69c7f7822d93845c0d701
SSDEEP
3072:ylELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqseDCBUqQNMDeIBSO:J3kOMeaavF17EP6qyqseQQNMiIBSO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ