Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
baad30c2d7222835430372f50e669cd4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
baad30c2d7222835430372f50e669cd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
baad30c2d7222835430372f50e669cd4_JaffaCakes118
Size
203KB
MD5
baad30c2d7222835430372f50e669cd4
SHA1
d58c1d700639211d3a3cbe788917e670f22b8d8f
SHA256
4ca74b4bc9dd4a7b133d1aab3ac998c81468c33a41e8dbd2c95997b7e99c5aee
SHA512
7113ea9220a050378293a2ae797f5fd7a2e9ab52f30f6fca0bd2b167605071e5660911ae16830571243911abee65d66a1f51e417036c2ba3a59981d5beaf0517
SSDEEP
3072:43fpmK5FEtmhd2lqlToq3XEMkRBMKqLK9lYCByLC+sSgYX3vGUa+lVfiTU8jhEl3:4Pf5WUBlTpkaLKsYLyut+lJipElFKa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ