Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
be9754f7b9a31c31d53781265e27785b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
be9754f7b9a31c31d53781265e27785b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
be9754f7b9a31c31d53781265e27785b_JaffaCakes118
Size
212KB
MD5
be9754f7b9a31c31d53781265e27785b
SHA1
3e07fb717015a121977448de4957eddffb117fc0
SHA256
8d146b8729eb701a6e7190b589fbc76ba47b05032d52f2f7bbece8f74c0b0932
SHA512
45f124579dc4221e42486dea625e4957afd9b87a2daa156535244866606bcf15f39c2f6334f0ad411bbf12b221765f4d3706d501c6c161443111b20994b132a7
SSDEEP
6144:FVYt6Lk2wtbjDWLMKwGPJ4Bz07pLLYoGyiObKe1Tjta:FVYMk2wNWLMKEBzypLzG96Za
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ