Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bdf52fc186ab5e7ee19df1d10a8c489c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bdf52fc186ab5e7ee19df1d10a8c489c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bdf52fc186ab5e7ee19df1d10a8c489c_JaffaCakes118
Size
236KB
MD5
bdf52fc186ab5e7ee19df1d10a8c489c
SHA1
b60cc5275fdfdf458802454a7ace39006a83ca60
SHA256
3ffe17d24ec3c028440ea861d42c9e76899aa9fb3f3aaae8a2a44d50f8d49b45
SHA512
1291b957fccb1e2e8b50a730d1e474b51a979469ff0c635c6a3c183a48059541c78eda17d4bb98c19a518c51bda573716ce32261f65fa729fa07011099d8e216
SSDEEP
6144:s03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB35VwfKBE1:sc1udnLSg03ymK2Ilm1F4a4kB7wfmE1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ