Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d71ecad8c6b4f65015e3018fe4674b85_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d71ecad8c6b4f65015e3018fe4674b85_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d71ecad8c6b4f65015e3018fe4674b85_JaffaCakes118
Size
184KB
MD5
d71ecad8c6b4f65015e3018fe4674b85
SHA1
353bef84c140fd7e2f15512372a5a9980edbbdc9
SHA256
c54f200c0aeef7ccb9e3493432219c30f2892ac596292e85ae37b540ad2f4a73
SHA512
d46828b014f7249e691c8e0466fdc094276693ff4966bc503be99cc929f4c06e1ea566ccab72cc952f33cbab708eb13f3cb71e5446a4a37c7a56e7498fae381f
SSDEEP
3072:pP/PSUcHQ+yOWkXYn7JBaczSIzdFGDQRQM6yYP1DauS9/zQ7jSgaeMIJTRu8:B3Sn2OWkXyFpe+VeOQJ0K70eMkTM8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ