Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bb743031b26bcc1d8ef4b5b4a8897cd9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb743031b26bcc1d8ef4b5b4a8897cd9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bb743031b26bcc1d8ef4b5b4a8897cd9_JaffaCakes118
Size
199KB
MD5
bb743031b26bcc1d8ef4b5b4a8897cd9
SHA1
dd0691173efd78776c6bd804abb86520950376e9
SHA256
a5d2254f3bb5ad5d1dfa35e9183b449641eeb6f2126ede38b0caf96af9216f1a
SHA512
544b30947709be0dfecef1ba68c2572eab3c3c5f197c45ba824b126e4871027ce346c651f28db048208b4af8edf553ba39b7ca8afc46b532d26fba1d1ac4f59f
SSDEEP
3072:Hz5V04aH+/F9alhgfDpilQMCqQrZVOpX2kN+whLSMfkauNS/OwWu5yhS:TQ4K+/F9aDg9HMCHlIpXrTdSsd/zWo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ