Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
a5455456fa5e82d51598f03f95d95562_JaffaCakes118.exe
Resource
win7-20240708-en
Target
a5455456fa5e82d51598f03f95d95562_JaffaCakes118
Size
201KB
MD5
a5455456fa5e82d51598f03f95d95562
SHA1
937b19401eb858e52ab9c8fda8c7a40fc5fd44b7
SHA256
4c63ea246d95269dc17a67ad31afd3adf3a8c8ec5c014153a1e0476a4257b8e9
SHA512
e025649cea6a049660def640e0a9e2451cd740e318fecca4ac9b00fa9da8940a696011af1cfae13073a04ae23f92be7f86dee66b782ecf7e3c0ae622c0e6f6a3
SSDEEP
3072:T2oNUytQCZ3P6itmVVEC6/aPSmRPydcYcsX6rtrCpYFl566g5eJn7tShPfJQi/:TkkcYAjhLYc4K1CWe6gsFYhPR/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ