Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
cdfd135f17eb90435c2a661559a52829_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cdfd135f17eb90435c2a661559a52829_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
cdfd135f17eb90435c2a661559a52829_JaffaCakes118
Size
241KB
MD5
cdfd135f17eb90435c2a661559a52829
SHA1
ef3b561e1f52620911c6840abc35e80ccd863c64
SHA256
83b91402e9be98151d12e58bbefd39280ff01816ad26c6b74d2b1869d35696f7
SHA512
d4a17e603d4ed9f546770217b6f8e4153c189713a4a7b5e44734013e402a4bbc1432913c044be7a64d4249b0d7cda204f954d295d9b5310b7d1091c9c314e972
SSDEEP
6144:GkeENDvTSn2SV/GuhYdViC7X57+nMe62BTkIIa:GNEND/k/GLPX57+nV3BwIIa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ