Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
b9241e5a3f1bb09b9f517944a5d970c9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9241e5a3f1bb09b9f517944a5d970c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b9241e5a3f1bb09b9f517944a5d970c9_JaffaCakes118
Size
202KB
MD5
b9241e5a3f1bb09b9f517944a5d970c9
SHA1
c4e9eaf8736d7909b20df854ab9d173fc37e92fc
SHA256
95adb96e33cd92b2171b0cd4d2354cc8d7a29397d377ce959c0c4d53278e3247
SHA512
9f6aa52148431c57980df5de5a5f9202d8a571d35b517406ae9a7f68b4edbe91f6ae8b0d330e9cdfa72f5206ac2155e71c89d6109d69d40eb1c7653cf513555c
SSDEEP
3072:D1lgKarBjCfYJ2Gkwf+uthTGF/Pke0A9Xoi+eMHZV4WofX/1fgSOwsv:D1mKx+dtE5PkuXohHZVFQX/MwA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ