Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a045a15b831a5da2a35fb1997bb2595a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a045a15b831a5da2a35fb1997bb2595a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a045a15b831a5da2a35fb1997bb2595a_JaffaCakes118
Size
236KB
MD5
a045a15b831a5da2a35fb1997bb2595a
SHA1
9d43a3c7bc4f7a5ce3aebe9f92c6315ae2e0c52b
SHA256
1937b32c6897fc883d32d81c993aaf062cd28480c1e71180b758afd11ba0b8e6
SHA512
f9d1a5b74743fba25bfd650d06d04cc7916da3e2ea29633eab7994b265a7d86719e2b85eb88981b675e50a8b0964de28b354ff7260872a77babc3d35b3d888fa
SSDEEP
6144:e03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB2O5bS9u5:ec1udnLSg03ymK2Ilm1F4a4kAWuU5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ