Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a2e2bd621f5e11816c231d2105a14d72_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a2e2bd621f5e11816c231d2105a14d72_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a2e2bd621f5e11816c231d2105a14d72_JaffaCakes118
Size
206KB
MD5
a2e2bd621f5e11816c231d2105a14d72
SHA1
b6b971f2155349fbcc4e914f7625c03d020ca765
SHA256
b9ff30a05ecf6bb389caa382c298ebaed05296c58bed94dd7b295942546e3aae
SHA512
c8abe53ac9bed3155794797ca9ae932c0271e31e6e64aa5bdd27925e43302996b00440493b18e98eea2ab95a7d5fb3c2cb37a644a723f0e974361141a44a2cd0
SSDEEP
3072:GP/PSUcHQ+yOWkXYn7JBaczSIzdFGDQRQM6yYP1DauS9/zQ7jSgaeMbfsEeQT8SP:c3Sn2OWkXyFpe+VeOQJ0K70eMjsVQgSP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ