Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
afcc83c9f3e13518c70bb80cc9408477_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
afcc83c9f3e13518c70bb80cc9408477_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
afcc83c9f3e13518c70bb80cc9408477_JaffaCakes118
Size
208KB
MD5
afcc83c9f3e13518c70bb80cc9408477
SHA1
771e51e49e78fe5da2c3a809236a69e7fade2fbb
SHA256
2982e4b8d7ebb72da818906712a35078626992ff85aa869d47071e748443aec7
SHA512
47318cffb120187cb9ff10ffb4ddc96011592497ff9eef017ee6c1912d7c6561243e422d27e641e0c4f9e5a520477a46c1f4aa86cd6b0dca23a23b90f0b92e1b
SSDEEP
6144:LozMw1Zn/OgHRmHwffT39pcJ/TVQ4zZHEai/ypnaIe:in/3vf+xQ4zpBwcnaIe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ