Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
aa000ca8ea97eeb0e8f03e4c577f1160_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa000ca8ea97eeb0e8f03e4c577f1160_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
aa000ca8ea97eeb0e8f03e4c577f1160_JaffaCakes118
Size
242KB
MD5
aa000ca8ea97eeb0e8f03e4c577f1160
SHA1
98c74c192151e5b953370ebde2078c2c58c531e0
SHA256
87fb8cd8e0a1c1dce3e7b1308185b53052f8618c5e113942c2e0aae9427fca4c
SHA512
f57f8b496049b98884f17863ca63cbe711fc544dca206f055b8ce0300ab03d50a7d79f94842d817c7995fbfe29e49b94475be90b64985f1e25a4464f24f37f33
SSDEEP
6144:skeENDvTSn2SV/GuhYdViC7X57+nMKQJOXC20fzNFE:sNEND/k/GLPX57+nxQAC2wzbE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ