Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b0007e7ee259e6f90e6f65a7c0c4f5be_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0007e7ee259e6f90e6f65a7c0c4f5be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b0007e7ee259e6f90e6f65a7c0c4f5be_JaffaCakes118
Size
236KB
MD5
b0007e7ee259e6f90e6f65a7c0c4f5be
SHA1
776feac170d8be973e0cd5662a558d6e21e9f308
SHA256
4f1c58cbfddb8638032e1d79139a4aee2d99017a2114f6e78679759479881d73
SHA512
660384debb895463a1c112e7c818c6d8d1b82dfc6d29861cc528b1b4dca4d80991ce6bed52b2d2fb862c0886c5fc96316a32945551e44046682a90ae54d93a66
SSDEEP
3072:plELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsAcX0QdMbYE1EnnK:i3kOMeaavF17EP6qyqsnXnEwK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ