Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b850cb97b97e7a8a6e60b1ab6b52f65b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b850cb97b97e7a8a6e60b1ab6b52f65b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b850cb97b97e7a8a6e60b1ab6b52f65b_JaffaCakes118
Size
208KB
MD5
b850cb97b97e7a8a6e60b1ab6b52f65b
SHA1
6a89a6b94fb02b529541185fe2da5ed5f399645d
SHA256
c30e5f75d59fc10207e7b10de5feb489740748fa864509d6e98f7640661b8954
SHA512
ebb4029d0ac4e9602f7c61133d460769be58f23cf940d94d8d95ba22cdfce9b51f22e98ce78f02e4da8594484dd8ef0e73c48cea711f21ee178a568814e660b8
SSDEEP
6144:qozMw1Zn/OgHRmHwffT39pcJ/TVQ4zZHEai/ZNdvIJ:Hn/3vf+xQ4zpBwrdv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ