Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
adfa811275e346f0353a1834e5bfec35_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
adfa811275e346f0353a1834e5bfec35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
adfa811275e346f0353a1834e5bfec35_JaffaCakes118
Size
236KB
MD5
adfa811275e346f0353a1834e5bfec35
SHA1
522320e1107860075b5c2a945bdddf9247754283
SHA256
bb67c4dde50c26a7102b84b40c47045835106bfdd65a5048ca386c1137dcf1e4
SHA512
0eb63c357014550a043d7f1feb539bfe1b02e9d08a12cfe8d438d3117bc47e8f81270866ff9d411d85250ff471ed5c18422e5d8ead1b35c5fdc1ef81bca19e15
SSDEEP
6144:P03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBz/g+jAR3+HqNS:Pc1udnLSg03ymK2Ilm1F4a4kZFj5qNS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ