Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a7dfcd0ac06be9dd9a08451380dee0ab_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7dfcd0ac06be9dd9a08451380dee0ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a7dfcd0ac06be9dd9a08451380dee0ab_JaffaCakes118
Size
241KB
MD5
a7dfcd0ac06be9dd9a08451380dee0ab
SHA1
3c07bb04e7fe2a2d174a2c6a9827c6b8351ee738
SHA256
ab02d52ab5c192427a31424e98c4d57b26989fc4cde380317d64d5957ad8ca7d
SHA512
b894dae7596bc2375bac3ecf99f11ff0d5e406e42cd7a21354d4cb884b2aa2893d3d9e52c17ffacda59be6a684a8614c7b0e9300149b352d357a77cac98d9710
SSDEEP
6144:U03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBmp/TwcywnRz:Uc1udnLSg03ymK2Ilm1F4a4kslw7wRz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ