Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b693cfc65b8dcccbb588516147d7b652_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b693cfc65b8dcccbb588516147d7b652_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b693cfc65b8dcccbb588516147d7b652_JaffaCakes118
Size
211KB
MD5
b693cfc65b8dcccbb588516147d7b652
SHA1
822d923d3f21c3d653414c9b6fbaaa434b0c899c
SHA256
429791655d9e55d98b0188cf278e3ba26a97d88b63d5ecf196bdccd151514869
SHA512
86aeb3ebf5d40cdc59cee2048fb470a4c36a26fe884e2b1821de1f52041c83bbd8926f48034368c511614f2f3bea45984ec8cc5d098517d04e6f2e73abb6b78e
SSDEEP
6144:+nLzSdRLwSz8+OY507XX+Oz49sBVcsFrF:WidRk7+ejAabck5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ