Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d667822d8afe906dd60e38f4530ecd57_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d667822d8afe906dd60e38f4530ecd57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d667822d8afe906dd60e38f4530ecd57_JaffaCakes118
Size
316KB
MD5
d667822d8afe906dd60e38f4530ecd57
SHA1
c85c6410c2991c43fa666dde0fd45dfe9e7e5789
SHA256
48b0df28b2950db331902bf7431a485aec95196d77c6e06a594edd4cecda6e31
SHA512
f06338ad0681b77e54a07d81ca1297183ee3c3de09a9059d321ab4a428fbd1e886dd397f31660496af718776fab864934d0f088ae2a44f4393e6b219b05d9c92
SSDEEP
6144:PJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hplndO+Osq5EHA8Qqyl:P42vRlPsBvmxzC/GQVplnd/OsqGDyl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ