Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
a26e12fd57160161d8d2003ad937b28b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a26e12fd57160161d8d2003ad937b28b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a26e12fd57160161d8d2003ad937b28b_JaffaCakes118
Size
203KB
MD5
a26e12fd57160161d8d2003ad937b28b
SHA1
927581be9d29059b1cb908bcfc78a0a6136f92c4
SHA256
a3a7075fda6dd5abe8017566fdb573798dfcc9447c8359840035f2a363dbcff5
SHA512
2892a76c52441d8f288a2f7ac3ad8351e47ac00f5b2f6bee9e541b6cdb480d248fc868aa26641a7c922e3dabf06a69a4c93efe3310cdba130ec5ff9ef89d9b3b
SSDEEP
3072:6TDXEVQNPlxjLSmP+6S14tG+jhsUb3yxx5WD6p04xIXB0aJIAAh/d3mdmt8P:6TTEGrtLSn6q4Y+V7+xsO2TFJ8/dM6U
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ