Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ceadca00b3277e7178889ab11ec569f6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ceadca00b3277e7178889ab11ec569f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ceadca00b3277e7178889ab11ec569f6_JaffaCakes118
Size
181KB
MD5
ceadca00b3277e7178889ab11ec569f6
SHA1
5a0321d7b929a00a2e1b71a7d49b9b3c85f978cc
SHA256
9757dfef7a491e3c019feaed3c2364af3e83495f3c3cfd659f4c9770f2b0679f
SHA512
2e0c1a0f85fffc3ee11f25ce87858626e60d13bb7f2684f5fdb81b38065b931dcc5b5ddc477d3a8000b5b88a8876f5482152938a8a188e01dc3c70d59a27553e
SSDEEP
3072:rVL/TnqMa4/08IuyUkNoCu5qDqVdc72+Q5CMCC8DPN5z7bIA31TzRjr:BzqMamIudsc5qqcC+axwPNd0AFTzNr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ