Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
ae39ce4fd1fd1a07d41555c8b2d06808_JaffaCakes118.exe
Resource
win7-20240704-en
Target
ae39ce4fd1fd1a07d41555c8b2d06808_JaffaCakes118
Size
201KB
MD5
ae39ce4fd1fd1a07d41555c8b2d06808
SHA1
b47aab51400e0824fb496441a3f9091b4d0d2b43
SHA256
816cf0fea1fb1bebb662739979238ca55bfca054bc9157331808eddb5f5f4c90
SHA512
a3a5baf42fbb22df8255124978f58d7e3d669238e64a790f2d3635ccde7cd7c829a0838ce3befa5aac16b8cd0f4d8217ad645b6bd0bd4af4c09d814cbdf8081d
SSDEEP
3072:k2oNUytQCZ3P6itmVVEC6/aPSmRPydcYcsX6rtrCpYFl566g5eJnN0o56BhrH7:kkkcYAjhLYc4K1CWe6gsFN0PD3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ