Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
be6f55fc0cfca9d6eda359b29fef44ac_JaffaCakes118.exe
Resource
win7-20240705-en
Target
be6f55fc0cfca9d6eda359b29fef44ac_JaffaCakes118
Size
201KB
MD5
be6f55fc0cfca9d6eda359b29fef44ac
SHA1
97162476fcbca6d60f69a99152a5863a18c83cc4
SHA256
64cf6f2c53171dcefabf109c0475a4ca42573cf9349ba4cbf1b8e15eb5217f18
SHA512
083aeba1efe97fb9a2eea86ae614968e3767d9deb4fd5a82dc5cd36129fad171a2a9d9dc8264d1d3b8b1c5ffe5d5baf28c0562bf5c0c96375ebab667d67b4433
SSDEEP
3072:c2oNUytQCZ3P6itmVVEC6/aPSmRPydcYcsX6rtrCpYFl566g5eJn2j6tnMQ62mp:ckkcYAjhLYc4K1CWe6gsF2utnMQ620
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ