Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a5d92fc9af6867ed2527398e0fd30990_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5d92fc9af6867ed2527398e0fd30990_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a5d92fc9af6867ed2527398e0fd30990_JaffaCakes118
Size
236KB
MD5
a5d92fc9af6867ed2527398e0fd30990
SHA1
82d532de58e3fc4ff02cdb1b3dd30acb659ec484
SHA256
a1ecbf1ca6fb35676f23b0d11001a878e72be3c54eac7039462a861949306b74
SHA512
fad9f8fc3753c2b7b6c3142ff77717125dfd8626b2c14609cdbc0eca8ba1c576c8d613feee7fef172954798ebc8476bc38c6f4c385d1cef4cd6a1db80e94682c
SSDEEP
6144:Z03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB0M6y+FW9q1:Zc1udnLSg03ymK2Ilm1F4a4kSM6XFiq1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ