Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bda03831190200f798859ac5739b6efb_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bda03831190200f798859ac5739b6efb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bda03831190200f798859ac5739b6efb_JaffaCakes118
Size
205KB
MD5
bda03831190200f798859ac5739b6efb
SHA1
84db0cda620c35cc693bb9fa22e0e142fd101d40
SHA256
0605db65b674fdb7d7f3968331561e136078f53fdba15b192fc8b46296bbd80c
SHA512
02f79d8cc1968f836bd5e29c38e7e6314e30ead8d2b2a5776ad4e67c3fed3f5a5403bf95efd1ca238cb2bfb3b394a48ac6172a86b1b90b8d0040b5d0fc35bea9
SSDEEP
3072:v01pm3kCAoaBGntRHdoznaGYI3CUKHSV6kdV5x1tUwHLYpsc6xHdRlaF+P4kQYZj:M1MaBwtBdjkbWSUkD5xbUnsXLRg+P4kn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ