Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a7468f4c9c96bc14dec7f0091faeb6ca_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7468f4c9c96bc14dec7f0091faeb6ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a7468f4c9c96bc14dec7f0091faeb6ca_JaffaCakes118
Size
203KB
MD5
a7468f4c9c96bc14dec7f0091faeb6ca
SHA1
767e34ec3e58ac9d5703f21a900030e45286c0af
SHA256
482c7427572b694854cfb4b59062c35b73fe061fecb94260b85bf68535c03f43
SHA512
c00b7c85542b59064833c22984607ef9a66fbc2581e2756250db11ef482b11c4ec09c495dc90b21ebb3521e89f1c5c8b55f7df64e770d723556f94ee7f56dbbc
SSDEEP
3072:zLPLIYthHUVzjhz4krPysFHwQoZJt7nqJAYMJWRvv/3AhjTYhVrq2:X82hH+bqs1wQU7qTSWR/3AhuVrq2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ