Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
c29301ed64f818fd71c00b35b9a040a5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c29301ed64f818fd71c00b35b9a040a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c29301ed64f818fd71c00b35b9a040a5_JaffaCakes118
Size
207KB
MD5
c29301ed64f818fd71c00b35b9a040a5
SHA1
0fe5aef6bc16b5810d3d026ed2b0351a42bf9433
SHA256
74c0be2dda1b9a863354cd5845b7928da1560345b602dca0948ad200e62a2a7c
SHA512
fe7b4ac05b022d1eb8517eeb054f28845b74b68821063c78738ae724f9bc7622f41852a69ed16773c3e3a82d80da144bd8fede8ec480907e3497f2f21793a274
SSDEEP
3072:PT77p21yY+vazvXiT+1U03/kCa+33RS6mi1eau+6v4pd5c+bXh8x+Ny5W0nJ2w47:V2XZrdy08oRlMau+24pZbx++6W0G6T
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ