Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bc15dc2774795a5c27b27820bb6cdab9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bc15dc2774795a5c27b27820bb6cdab9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bc15dc2774795a5c27b27820bb6cdab9_JaffaCakes118
Size
206KB
MD5
bc15dc2774795a5c27b27820bb6cdab9
SHA1
51d2f9c4d01463eadb8f7818ae1a2205aef2d23a
SHA256
feb8f8ba6ca87383daa541dc44c44ee5bd366a940e6c0fd5cbc88ae62efb5daa
SHA512
1d546934ab0fa4e6e0ca91725ecad617497cf626adadfc83fc89ecd9439cd163d18aa0767b939115d94c006164417bb41e00b5461c6614567621532c7045beac
SSDEEP
3072:zP/PSUcHQ+yOWkXYn7JBaczSIzdFGDQRQM6yYP1DauS9/zQ7jSgaeMvht5:D3Sn2OWkXyFpe+VeOQJ0K70eMv9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ