Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a3dae4a87956a108ac1403ebcc1a6961_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a3dae4a87956a108ac1403ebcc1a6961_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a3dae4a87956a108ac1403ebcc1a6961_JaffaCakes118
Size
207KB
MD5
a3dae4a87956a108ac1403ebcc1a6961
SHA1
dccdbf36d51953158f4525ac2d2f93e9d48708cf
SHA256
4d6aa8444b22e5d510f7e63150568de9dbdd82634229ba189ce093a4e249dbe2
SHA512
ca985b951cd858d6349ce915b0385f62875a7464fea25d464f365bd601afedc1765f51f5a15b0c772f0f485d734831d507bc62f1d9e0d2b68f6c09886a06686b
SSDEEP
3072:5Zipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubhHF2VbUPAQ57:mpbaeyWECcp9AcFJ5qIUhlY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ