Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b2dfb7c79ce311cde986e6e69497bfaa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2dfb7c79ce311cde986e6e69497bfaa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b2dfb7c79ce311cde986e6e69497bfaa_JaffaCakes118
Size
203KB
MD5
b2dfb7c79ce311cde986e6e69497bfaa
SHA1
b393fd3b68f0f05dcead19393ceaa40546a4d831
SHA256
9b6676bfaa07b2ed1b30d9c26a5031b56c57148685375e38ab0b846d32ea5b95
SHA512
1a6cbb9dbc1162e7a96648993c6225cb79293bf213fd01935273b2b17d082f582691caa22138acb6485569f1584d8053a198b95e813dfe12ee6987c01719fc40
SSDEEP
3072:n3fpmK5FEtmhd2lqlToq3XEMkRBMKqLK9lYCByLC+sSgYX3vGUa+lVfifUaj9qYL:nPf5WUBlTpkaLKsYLyut+lJifUaj9qQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ