Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b90bea4b3375293c338c14f447849502_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b90bea4b3375293c338c14f447849502_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b90bea4b3375293c338c14f447849502_JaffaCakes118
Size
205KB
MD5
b90bea4b3375293c338c14f447849502
SHA1
827e69c227c497ec89aaed91ef094c025fe6ef77
SHA256
41d1bbd9c43a5b8298c1f1f892b11fdb7b1ed129237716effe14f6dc5ef24ca1
SHA512
1b34066039079dcca81439a16d66f3dd88630954db104752cb33fdea39123ab98b91e2419fb1c258dda21bd2cc9486993b5cb730ba682e3491af7db29391574d
SSDEEP
3072:ET77p21yY+vazvXiT+1U03/kCa+33RS6mi1eau+6v4pd5c+bXh8x+OITBHFiOka:82XZrdy08oRlMau+24pZbx++VTBHFiO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ