Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
c91ddd9b2b3312fe1f627b699d9f622d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c91ddd9b2b3312fe1f627b699d9f622d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c91ddd9b2b3312fe1f627b699d9f622d_JaffaCakes118
Size
204KB
MD5
c91ddd9b2b3312fe1f627b699d9f622d
SHA1
33537bd9e3e9a9e9b94ed12607cecfdb0146ffe2
SHA256
43f24007515f1d1cf2927f59c32c323ee8b7c046b3dbbd1e7cb1d3daca1d1ab7
SHA512
3d3a7ad785361ac78c58941e285dfe71445aff55c889ba46f94e7a8514484f2baae4128d939471ecf5eca9d1ed6440ce5fbd139674462a71416805a7ef3d8903
SSDEEP
3072:Qbdja9frMEgyP6GJ8bVesuY60K22dTr3/5V6334ceOeO0y97wbg3cVBoyd3LEUID:Q1uTMEd8Al3/j6nzzFhdiBP7EVQA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ