Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d569a0efde647968dd641e4164e6b94e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d569a0efde647968dd641e4164e6b94e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d569a0efde647968dd641e4164e6b94e_JaffaCakes118
Size
236KB
MD5
d569a0efde647968dd641e4164e6b94e
SHA1
5ffd12a85c92d1efd38f7abda239a4593f593703
SHA256
7e98dec7ddd03c41c83a6be5e776870e5c57b0f3e27a4e64485837249311eeb6
SHA512
b0da77c327690a0e58063ef15e2dcf20d0c733d4b57a228112558e4048260551e124449699ed7b636618ccfc6c774f659e2db5029ebc580463b79975b10b0e10
SSDEEP
3072:flELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsVsKZoERDNePAzYi:M3kOMeaavF17EP6qyqsJ570AzZB6mh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ