Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
afdf3f838cb45e6fe4dfe95a6e70ae26_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
afdf3f838cb45e6fe4dfe95a6e70ae26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
afdf3f838cb45e6fe4dfe95a6e70ae26_JaffaCakes118
Size
200KB
MD5
afdf3f838cb45e6fe4dfe95a6e70ae26
SHA1
d580e360d035ce063a0d3ce674276a0ba4776fec
SHA256
96721633913a3ff6d1ffa571a36982deee790c5c6cf4b8fb886791b76159ebee
SHA512
ce0751e330d78020d97a2546dad16d8cc36eb00319595d9b169e6b7756e0de8bf8d91833250195d32db293439c1899482bc343057f1a1fba6958a1176530f480
SSDEEP
6144:C7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRrPksMnzwYCS:C78AqbaVcmAo7cGNpwCi+eQZInHt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ