Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a20688c60985869dcd41187f4b6eabb8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a20688c60985869dcd41187f4b6eabb8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a20688c60985869dcd41187f4b6eabb8_JaffaCakes118
Size
307KB
MD5
a20688c60985869dcd41187f4b6eabb8
SHA1
1787fa64a7aa2911c8fb4d2c5470a4b5dfd6d070
SHA256
717e4c934e5ccdb5147627ee7e4d2136e89270b120095f7cfbaa5bc96eec0638
SHA512
bf3378354bc941cfabdcb2dc9027564cb040f6ec0bedefe366b1345dfaa2e9ecdac0d83f5ab1ac7d7d0f0f9d5b9fd8eb526c84be50c12b20dafdf908addcb5aa
SSDEEP
6144:qeQdYwDBgkxKljQcnTlBAkWL1S0ThOXvVjdR1GwwbpfWO94:ZWYwFdKlUcTYkWL1SxVjdD56pZ94
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ