Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
be184e2f161d4e3e5dcd47e1b5df215d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
be184e2f161d4e3e5dcd47e1b5df215d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
be184e2f161d4e3e5dcd47e1b5df215d_JaffaCakes118
Size
242KB
MD5
be184e2f161d4e3e5dcd47e1b5df215d
SHA1
93a606d772b1b3a41b43311cf8506f440f1ecf6c
SHA256
2408623c615066d839d1b7f984d34c5bdd3714976e4c7c89149c04fc3a6e7c2a
SHA512
9096980eb91db239839060adf70b0cf296129c970ada9b21a7889df649d152da2d7b8d5bf64e646d3657f09f20e74f444efd6dbe276ee107a9e3f25f56084695
SSDEEP
6144:2keENDvTSn2SV/GuhYdViC7X57+nMlUJJj1X49F3y:2NEND/k/GLPX57+nnKBy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ