Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bb36c5f84cb04caffc8d2b298eb575d4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb36c5f84cb04caffc8d2b298eb575d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bb36c5f84cb04caffc8d2b298eb575d4_JaffaCakes118
Size
208KB
MD5
bb36c5f84cb04caffc8d2b298eb575d4
SHA1
bf01b51cebf530cd75ed7b95157e9a1e3e26a368
SHA256
15ca91f1a5a50e7c703d19ca8e59ee833232bf280fb77d407730c42c5c657f0c
SHA512
2d39000d450a513331f7e519e39ce2ff79526d5e75d12c70c5146aa99882c04c3f01ef15de2e7f71cbbc74d272ecdf4fb1466f6423fb669fee3cad8f1494cec2
SSDEEP
6144:YozMw1Zn/OgHRmHwffT39pcJ/TVQ4zZHEai/qXbPv74:5n/3vf+xQ4zpBwmX7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ