Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b2f5d7ae4704f2a17a65d0d83767a713_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2f5d7ae4704f2a17a65d0d83767a713_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b2f5d7ae4704f2a17a65d0d83767a713_JaffaCakes118
Size
236KB
MD5
b2f5d7ae4704f2a17a65d0d83767a713
SHA1
0c85b50c608de901abf62121a0ec5590db960a7e
SHA256
00751e7c014996a7ccf00a53b3bc9fc0c635ce6583da55a0667922d23c8479c8
SHA512
4bf9101177854bc84bb0d3aa5ec93063c5ad0040c0dcd58d92e965842ebcb62483b2aa6a3904f453da9e3366f3ac265b924cae27d528a38cc6228d677749d969
SSDEEP
6144:203XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBjOmtNZnqfaz23Vc7:2c1udnLSg03ymK2Ilm1F4a4kdptqlVc7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ