Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d4ddf04884f827b046e82d3ad36b6c33_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d4ddf04884f827b046e82d3ad36b6c33_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d4ddf04884f827b046e82d3ad36b6c33_JaffaCakes118
Size
236KB
MD5
d4ddf04884f827b046e82d3ad36b6c33
SHA1
edaff453bbe13aae7e21df1c6cde019a65cb7e31
SHA256
18b3632fdfaf0296e133ac79a1229539afcb223e1e6c2aa0b057d09e79c16fcf
SHA512
432fb8df33e43f2f5c7cc49ec615695d0ed247fcb029af24118600b765c9f686ed54c1d08573b9f15c03dfd2d0e09d90b631e2cd8309db3dda4043c07eb86988
SSDEEP
6144:Q03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBHzffFV:Qc1udnLSg03ymK2Ilm1F4a4kNzlV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ