Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d55ebaa2f46e6cb48860c80131378ffd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d55ebaa2f46e6cb48860c80131378ffd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d55ebaa2f46e6cb48860c80131378ffd_JaffaCakes118
Size
222KB
MD5
d55ebaa2f46e6cb48860c80131378ffd
SHA1
27dba16e2ab12180b393df16361a7b4662dbaf1e
SHA256
983787f09eb09fd5ddeaf4986a354635165b4580c2317188b8197c5caa4f6818
SHA512
f747182abafc05428db2e47232a141b1b49d50bf40f2bf11a99850f7b94f8ba55753516fbb22737f13459f33533d8bb363f8009bb2dce0b6a594dcb4151ce543
SSDEEP
3072:A1kpZ8NbaLcGNJbj56TkswDIdSsQGGWqacUiDmCX9+5Xp2xsst:1Z8NbagEj564swsS8GWqsMFX9s6t
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ