Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
aeefc9aa19f2f84e99d71266c635ab16_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aeefc9aa19f2f84e99d71266c635ab16_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
aeefc9aa19f2f84e99d71266c635ab16_JaffaCakes118
Size
205KB
MD5
aeefc9aa19f2f84e99d71266c635ab16
SHA1
3d2a915f041dc4831809d56dd228ee2cb5bdd9c9
SHA256
31bd46a15ff88a0cf4c14fa944df6e5082c6f5d86223a961bf682922ace46060
SHA512
f1f110e53ad54ac0008f2930602191f09db5f3e84843a1577cacbe365c8c08b42cdc6377d99ffffb4f6de8bd061ff1dc304d71c1e5355efa70d16b9fde9e9c4c
SSDEEP
3072:Kjj0hnS0Pq9iFlfXFbrSCXe6A9b39XYKgajbLD8FQ7h1DEZBxyrbR9/4SALHL:o0hfPqsPFbrBLAxNIKgUgk16yrbr/A
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ