Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a47009346bfbb996a5a5f0cf41c23fbb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a47009346bfbb996a5a5f0cf41c23fbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a47009346bfbb996a5a5f0cf41c23fbb_JaffaCakes118
Size
242KB
MD5
a47009346bfbb996a5a5f0cf41c23fbb
SHA1
695ec0a9bbad707a5ea5b90084b497adf8ea466b
SHA256
74ea53147961655aab72a8c22c07793377b6432744504792963c8225effd7205
SHA512
c46a89cda8be5acf2dd6b493f20f476c04bb9e41a9ee396939b1e34fd08b02868f33e854236fb9a2300376c3d6adc3ffdbacd45cd97aa6ba5aacbb85f80c2963
SSDEEP
6144:S03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBimvlpHheYgoKb0O:Sc1udnLSg03ymK2Ilm1F4a4kEc3f3KAO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ