Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bec5619334e9b5c44b03b97ee2dd3206_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bec5619334e9b5c44b03b97ee2dd3206_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bec5619334e9b5c44b03b97ee2dd3206_JaffaCakes118
Size
241KB
MD5
bec5619334e9b5c44b03b97ee2dd3206
SHA1
459a521c02215cfdcb0f82bd37262e8df818d7df
SHA256
b09e7444e5462ce0ae7da5f9c29dc9db2505de5cc8fc957448401113378060e2
SHA512
065eab9fe1b8efee54072a86cf2aa9a9538d9216c0be1f87972b444ee270daed3306afba0ae6734cede61d683db18b781cf14653faa9858365f72f23eca72402
SSDEEP
6144:MkeENDvTSn2SV/GuhYdViC7X57+nMNYxvTDG0yGV:MNEND/k/GLPX57+n+iu0yGV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ