Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
c1b67f2e3fc2d2bbe6cb919520c8dfe7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1b67f2e3fc2d2bbe6cb919520c8dfe7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c1b67f2e3fc2d2bbe6cb919520c8dfe7_JaffaCakes118
Size
242KB
MD5
c1b67f2e3fc2d2bbe6cb919520c8dfe7
SHA1
a7328c12028060dcce6476e6bd08687bf5b92217
SHA256
37ca4493b8caeda92fc3a16d5e67564efc184eb65b3767dcb5240b3ab017da2f
SHA512
d7127f66c38570edf806fbe2f1100cdee56f7b1d5790cb4612324154e33af274849cde6e4294f55ce1cd6e5c678d865c1d849c297d789c6cdcf3f3a6f1515ab9
SSDEEP
6144:bkeENDvTSn2SV/GuhYdViC7X57+nMZn/9K2iz/:bNEND/k/GLPX57+nQU3z/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ