Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a3ce78de1b63b0a3f2d6524afb0d245f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3ce78de1b63b0a3f2d6524afb0d245f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a3ce78de1b63b0a3f2d6524afb0d245f_JaffaCakes118
Size
241KB
MD5
a3ce78de1b63b0a3f2d6524afb0d245f
SHA1
b695ee3c326209e2f555c07ec41525f5786d64f9
SHA256
d34934a6137889e0e780d19d0e587f6887ffd2cc69d8a5ea83be5e08bcacb692
SHA512
0ecf9020d4eb8035c0c4fb18924dbcae61505d4ad552734abcf331ee2b537ca3dcad70cc3fa88c84ed4b338ad9fe4d39da2dd73720db7b48b2528e61ce749d15
SSDEEP
6144:bkeENDvTSn2SV/GuhYdViC7X57+nMCGMpBEG04o2Mk:bNEND/k/GLPX57+nRzpBE4o7k
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ