Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
d564dc0b2682ceb82bdfbc2ae0746a29_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d564dc0b2682ceb82bdfbc2ae0746a29_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d564dc0b2682ceb82bdfbc2ae0746a29_JaffaCakes118
Size
182KB
MD5
d564dc0b2682ceb82bdfbc2ae0746a29
SHA1
651971ab3fc3f597151a04676e884b86868465bc
SHA256
3f7b292d63b47d762b9349285cb7fa8643207a04a21e524f62a8a2e4bf1f022d
SHA512
cec20d8041930b099093883b61809aac243fbbe5e972a3bc222735aecec2874017417d9d05dd09336f122dd0b10733b73aa58eae9f186b0fbb03a48e8ed58978
SSDEEP
3072:520JoBvIV2du1DZgkbkHjArCM5DjlT2WjbXI6W7o0q5+rZHbcc9m/InuJML2TDly:00JoBY2du1DZgkYsrreWnI6W8J5+lFDV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ