Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
cf8d5a8ae01a1723effa8bf24b674533_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf8d5a8ae01a1723effa8bf24b674533_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
cf8d5a8ae01a1723effa8bf24b674533_JaffaCakes118
Size
228KB
MD5
cf8d5a8ae01a1723effa8bf24b674533
SHA1
b453872042c523992a08f767a14ae8ce3a87e8e6
SHA256
6d141d9f228fee236b9e7eab01bf01cdd19efbf9c2bc37493e95ce91e8771ffd
SHA512
b8c1ce43bde22f1fada1d3411b5b3a53023a2e93a1de4a42501a6ccbc80e51c615abc0de845254b35438e64da4b5bfaec5c41b311edde77daba127f08586d5d0
SSDEEP
6144:64Q9x2N2h74vSmC/eakYkJ9afR+9ge1LisQOcNeSnmHtsqhIkA:bQn+vSbkYkqfRNe1LiN/bnGsqhE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ