Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bd65622f5608364ba38fa2e90f007bf8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd65622f5608364ba38fa2e90f007bf8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bd65622f5608364ba38fa2e90f007bf8_JaffaCakes118
Size
201KB
MD5
bd65622f5608364ba38fa2e90f007bf8
SHA1
62f88b156406e198dc18e0d65f4c630f21461deb
SHA256
a6965eba3d63f748fce851d518aae36a18760c778496b4eb4e67a226d6b1921e
SHA512
7067b9f62dc5b0252318eb4f74ebc03bb3098f8d6251b806c01dff8cfae8084aa1e12910f21a123d07ad9243afa376ab4dbd001813c19fa8b52269ee43143ab2
SSDEEP
3072:jPjMB5Bme8l4jklKEUkdSQhukwkZBfh4hDXrIvgEZ4O2Ld9NIm9wZyLtMmYnT:rjs5BjkIidduUBJwXr2sZwmrh2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ