Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
dc0d049d6be2531f86e591094dba076e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dc0d049d6be2531f86e591094dba076e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
dc0d049d6be2531f86e591094dba076e_JaffaCakes118
Size
208KB
MD5
dc0d049d6be2531f86e591094dba076e
SHA1
75294e81543e4e3f2949b9f2bce7dae2967c0a24
SHA256
2c0be7bbe3c8104e16a13449b7900e48f65cb1219e6f19c5d9920357269074b7
SHA512
8ac332191691737dcad641b25563fe427e6b4d035d38250f5511dd5075f540930b2a3aeef589502e3ffeee768b62df0651e5196d7f57e0e4cebfd64096b2caf4
SSDEEP
6144:lksq3LbK9/FU1DFJnhQk5R8aBfZl7Qg7tZ:lm65FU5L+e8aBxl7TT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ