Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
be96a35ea2a3ebde0731829a25e0e553_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be96a35ea2a3ebde0731829a25e0e553_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
be96a35ea2a3ebde0731829a25e0e553_JaffaCakes118
Size
236KB
MD5
be96a35ea2a3ebde0731829a25e0e553
SHA1
808ccf632e9221dead6737f038e88a93ce5e4fd6
SHA256
80b2a694b3afb06de79d9e450947451e1f1d86e9a0785038f45f984b46d9987a
SHA512
0abc317990dae0c63958aaea39355481d4f5b96e02645370a265f028063d4168138d05c121b5dcaa259be9aa5311126886d3c5379a613ff85060a3c3e7535321
SSDEEP
6144:v03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBBOO+zYDHGNlQa:vc1udnLSg03ymK2Ilm1F4a4k/mYDHGNx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ