Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a1d4fb3963a88f40dbac2e50fd72096c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1d4fb3963a88f40dbac2e50fd72096c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a1d4fb3963a88f40dbac2e50fd72096c_JaffaCakes118
Size
234KB
MD5
a1d4fb3963a88f40dbac2e50fd72096c
SHA1
e3d24a02204127a4065c9ee80ed93499571eb8eb
SHA256
76270c8155a45d3cd47ee61c7cfca9c4475d765705638e5ea89de95f0a2c1e41
SHA512
64253715698e98bf52f06778412f5a5269d2ac6968e2339357472db16110d9ba82184999a481b8900c747b252df24a20dbb99c42858f702a976456d86db7da6f
SSDEEP
6144:D03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB0hdA9BUcHyMz:Dc1udnLSg03ymK2Ilm1F4a4k+hmI2Lz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ