Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
c8c66b4c81f6190634c2597dd565f437_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8c66b4c81f6190634c2597dd565f437_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c8c66b4c81f6190634c2597dd565f437_JaffaCakes118
Size
236KB
MD5
c8c66b4c81f6190634c2597dd565f437
SHA1
6fbae014c3bed3de6c8295ff2ca44e2a7f53eb98
SHA256
b72cc97bb5b5255e1b6301999ffd53f19909443c38aba4fe782d41999098cbd8
SHA512
494d35acd09ccfae9d609dc1e3321c8ea0e608de57a536e25f61e8a824b1701296672defe56806b1d04797388ce037c3fb84258090bccd2a065a4e3d60f102a8
SSDEEP
3072:HlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqstVO+ZIjQ66N/HSG:k3kOMeaavF17EP6qyqstom6Q6GSG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ