Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d70fa2b71542b9f7e7a744d46c14ef07_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d70fa2b71542b9f7e7a744d46c14ef07_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d70fa2b71542b9f7e7a744d46c14ef07_JaffaCakes118
Size
205KB
MD5
d70fa2b71542b9f7e7a744d46c14ef07
SHA1
52c80dbf178b6a5d33b4758e3468e86003f5beff
SHA256
5e5846264e91fe849d2e3f973558cd3f661fe7a259f2eb1f91d484ee310b19b1
SHA512
441fbe198bacd773f443c80c6789ebe25b07bf5e37daefdfc875806ced91fedea5ab5788a616f89a16424b0fd695373b1c583d3634b90a3e138a0afa270f82b3
SSDEEP
6144:hqWSmaBkiDmJoILdGyo7/IyHjZQFhJ5jmG:hqMIkiiJoadGVDZOqG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ