Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d255f912e067870cebb2b5f138217a50_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d255f912e067870cebb2b5f138217a50_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d255f912e067870cebb2b5f138217a50_JaffaCakes118
Size
237KB
MD5
d255f912e067870cebb2b5f138217a50
SHA1
d09d71810d7e2cf6402101d3307059d4454973a9
SHA256
95a7bdd298816f7f236361074c19750b116e5dc2a1997bf59f91e55778c5f347
SHA512
c501243e0631e892d7fca49339ba11589f4e9bebfbfee5e3d10bc388752cc057928c3010b606e9e1b8c4fa75736ee77d3874a5ed63f1ebe5f720090c3a10c75a
SSDEEP
6144:903XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBJGGFZCU:9c1udnLSg03ymK2Ilm1F4a4kLGGFZCU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ