Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
c758243937c3069ccbfc853ee786fced_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c758243937c3069ccbfc853ee786fced_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c758243937c3069ccbfc853ee786fced_JaffaCakes118
Size
236KB
MD5
c758243937c3069ccbfc853ee786fced
SHA1
b50e8cce312a69e340320d45e9e3b8765a5f2294
SHA256
570399006cd2f276cb7d332c5748fa38b450f7e7ef080a271f1706598b067d21
SHA512
6ce00dea42df8b9546ca5e0645df586fd1a77330269cd81741c28d53abb57c91a0b87011b619f3cda36d829b832afa8e8036f3aba9f5db56f6164b0ec1a65236
SSDEEP
6144:X03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBCP6w54lUl:Xc1udnLSg03ymK2Ilm1F4a4kK6g4Wl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ