Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bf1f6c47f6a6ada92a95fb8199a739d5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf1f6c47f6a6ada92a95fb8199a739d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bf1f6c47f6a6ada92a95fb8199a739d5_JaffaCakes118
Size
211KB
MD5
bf1f6c47f6a6ada92a95fb8199a739d5
SHA1
3d9136c68fcc9b46cffe5dd0fe4088e7b13f402c
SHA256
aad5927a49372dc9072c52ee7ab8c507ba2e92f4631bfa37b423d08f2587ee44
SHA512
634323f4a0dc498b9b9caf89b83fd6ae5cc522ae8b919f3eff79284bf8e3b1bf1cb3169d812d9ab15387a7b9696b176060ff9502248dc7b4771be8bb11ef751c
SSDEEP
6144:1pQh9tLA//w9apAOWaSCSDsoQwdhyqsqm:XS9tnsAOWaFxnwdhyRqm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ