Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b33565db4dc3da862c37eaa3549c3b79_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b33565db4dc3da862c37eaa3549c3b79_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b33565db4dc3da862c37eaa3549c3b79_JaffaCakes118
Size
227KB
MD5
b33565db4dc3da862c37eaa3549c3b79
SHA1
5006c9d8e55895de020ee771e20075001674a614
SHA256
fe8b72cd6d7f995439d50ef06d33be916e66770e433302614b62ac5d511c63d8
SHA512
c8171cecb1e71cd7bfb3d469acf1b0ff16ce76883be2620cea390933f45163e9a7c3578d7bc2f3a31e93906a49d1b1a4d1a182a033e9aad75252aeedba601662
SSDEEP
6144:fy8Gngxu7bu28Bi6fxVwZkHx/jwGgKIix:fAngkbghOOJjp9IU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ