Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bbe7b17969f9d498eefd2e0de2a76aa1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bbe7b17969f9d498eefd2e0de2a76aa1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bbe7b17969f9d498eefd2e0de2a76aa1_JaffaCakes118
Size
205KB
MD5
bbe7b17969f9d498eefd2e0de2a76aa1
SHA1
1d3144a9cacc9b7f13b4f2772f93aa301063b622
SHA256
3cf4dfefb1f621086c69bc5df654dc13de703cd817b44ef869ccc6693a10802d
SHA512
f83290c23dc91c9e080a24ee4847da90c0d17f978f1a6881e232d7aaa3e215b91f0e23817a197c0d1c39a9689bfebba404527bb1dbdff72b5c0ff28da145b25a
SSDEEP
6144:S1MaBwtBdjkbWSUkD5xbUnsXLRg+CIh8L:S13wKiiD5xbX7Rg+eL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ