Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a5ac00046b8a104cfa5cc16f2ed59aa4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5ac00046b8a104cfa5cc16f2ed59aa4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a5ac00046b8a104cfa5cc16f2ed59aa4_JaffaCakes118
Size
186KB
MD5
a5ac00046b8a104cfa5cc16f2ed59aa4
SHA1
1c634307832a0021dbad274e55fe00a9cadb2339
SHA256
1ba3ce61b50c2abb9f99285e5c48d9fee9ff12cfd7cb4b8908077bc3b94c8901
SHA512
06c1a55c941a21623dd332b6a3735a14e1e8400ddc4f0949fd2bd0e866083dfb1d330ad5c75bb3e599b2a91ac5c87e1706015a721d3dba1da9c0bfc7b2d8629c
SSDEEP
3072:9cqPcpbwkISpGwUWmn8fXMo0GPn0+bGPQ79hD5sfmaikNN3rZVpY:ulwLuGQEmn0SwPQFsfxiK3rZ/Y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ