Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b15a5f031c695d6cb7333bb3fbdf8e0c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b15a5f031c695d6cb7333bb3fbdf8e0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b15a5f031c695d6cb7333bb3fbdf8e0c_JaffaCakes118
Size
205KB
MD5
b15a5f031c695d6cb7333bb3fbdf8e0c
SHA1
135dfab1fc836593bddaca7bdf6679062256333c
SHA256
72acd3ac1a5210223624cd896d0690736d3fec3fe8b3efd0c3b4189f75d74bb1
SHA512
8789c52e633adcdda45d4d5f6fd8df87155c66ddaf6c4e3eb03b15c3897ae7ae57664ba5ebcd303cddc1c2d962d3f91bdc447297a6fed29b6db1aa47232fe7f9
SSDEEP
3072:pjj0hnS0Pq9iFlfXFbrSCXe6A9b39XYKgajbLD8FQ7h1DEZBxyrXpJEBXevJ6:Z0hfPqsPFbrBLAxNIKgUgk16yrXpJPJ6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ