Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
af3866a404e6720734e2ffb1bf1bc57e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af3866a404e6720734e2ffb1bf1bc57e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
af3866a404e6720734e2ffb1bf1bc57e_JaffaCakes118
Size
205KB
MD5
af3866a404e6720734e2ffb1bf1bc57e
SHA1
c45a20335ffe25c84f1557897da9e249b4031706
SHA256
ef6e789925839286c8b9f62ec96938d392089ec7bd4a59f179faa4ecce5c7064
SHA512
3e967cce6aeb726b6c669bfed4580746a4d1f38608b1362116c8dc2361b16ad41475efb98121ad1f01eb445480c13c466168ab2f61a8b5061142be62e6a6be0f
SSDEEP
3072:AT77p21yY+vazvXiT+1U03/kCa+33RS6mi1eau+6v4pd5c+bXh8x+5PoSf:Y2XZrdy08oRlMau+24pZbx++5vf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ