Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
dc6045b42351d1ce264abf2a47210c06_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc6045b42351d1ce264abf2a47210c06_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
dc6045b42351d1ce264abf2a47210c06_JaffaCakes118
Size
230KB
MD5
dc6045b42351d1ce264abf2a47210c06
SHA1
985812596f4d4898db936e5ef020a44606f05c6a
SHA256
556d7dfd547f5b52b38f1859a186db6204aefe6e6e1200f0d3cd2b9bbbf7acfc
SHA512
1ee8300a9eb22eb1a01d1bb8dfb34343c663cf123039b36e7ff605801ad71c7c31ab04b16a56ffa1ac841012ecf359c9db8d750fbd0cc8dbe7910eeb1675fc81
SSDEEP
6144:JfOOBdC1kDAwnp1D8nCl+DKkZVd2pqrQQPruJMGjIp:JmkA10Tl+KkUpqrpPrGMGUp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ