Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
baa4a26a24c7f9df4ee001ddbbd34464_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
baa4a26a24c7f9df4ee001ddbbd34464_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
baa4a26a24c7f9df4ee001ddbbd34464_JaffaCakes118
Size
219KB
MD5
baa4a26a24c7f9df4ee001ddbbd34464
SHA1
889cd7ecc8ad7707fde3dc6d535ecd0af32a916d
SHA256
d8e72a10abc893e313eb0296f0f73972e4bb9a79611975b03b50cb1e162cee0d
SHA512
f5d811f3c64835264ca2e73573fdef50d5b0fe417d5fc1a94a874985599049bdbcfd9b4847bb89918d68c6b1b5b5c7f810ce91f924b58ce8adb9483f384a6525
SSDEEP
6144:GauRDACLPOZJ5SzJo0F1X8CClGNnhCZ5VxZ5j9R:GlRDA8Or5gF1XdfnAVxZZH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ