Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
adca0c3ed90ada059d9036539666a850_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
adca0c3ed90ada059d9036539666a850_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
adca0c3ed90ada059d9036539666a850_JaffaCakes118
Size
205KB
MD5
adca0c3ed90ada059d9036539666a850
SHA1
058423fd512cd9330ef789730d6e42eeeee26759
SHA256
32a2cef985fd6d0a8ade326e2b0c131ba86ef5f4dc11ffdf1cc375a10249603c
SHA512
837fd5b220fb4117825b9159c8564353344f96829d26744e0f98931451683d6f5e30ec7a61d440f5b1eb334468b9827e5e7bdee14abe677de4c5ffa21babde1b
SSDEEP
3072:3xSG6JufSm3qBJmiDuVIXnRrQjoILywfOyo7/IyHLrjO29K8P5V8rkw:hqWSmaBkiDmJoILdGyo7/IyHjO29Dkz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ