Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a9c383cd8ed160ce26aefac2bfe48ae1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a9c383cd8ed160ce26aefac2bfe48ae1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a9c383cd8ed160ce26aefac2bfe48ae1_JaffaCakes118
Size
235KB
MD5
a9c383cd8ed160ce26aefac2bfe48ae1
SHA1
ea2f21e47fe9f3097ee8bfe42a6563d51f4c8f24
SHA256
4da3dc6e1d47a7f2ebfec0cf09d3da8d8486409c22a0f603a6496155571a02b5
SHA512
5a1132c0c061bc6971a15e01153ff8dbf49c298055329e17562756ad7ffcac14bd39554d812a03436931208fa4b2364c7e89fbce396cf1ab96fe9a94e8d63dd4
SSDEEP
6144:QHaCVreB8ojFCB8Oq+q1R3CTKDmXnyE79asl+:qabB8ojFI8OqPJCTKDUnL7wa+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ