Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
dcc513be7f7e24a867439d404f370c29_JaffaCakes118.exe
Resource
win7-20240708-en
Target
dcc513be7f7e24a867439d404f370c29_JaffaCakes118
Size
202KB
MD5
dcc513be7f7e24a867439d404f370c29
SHA1
0e99d2c1b85a843607cc1f2074ca00f0f37629f0
SHA256
337dc456a2d7d3bb0e9e634366c7685664604ffe2d1a011a0f129b99fd9f0773
SHA512
e24c1c4ed8be7a7d8e837d46bb98fd02b480dc190d80eea19bf660cb2e8794c3dc116d9dce61981321d7ce09cd023264ba36315fb8e819763fbf3a25fc06c018
SSDEEP
3072:Bn2oNUytwCZ3P6itmVVEC6/aPSmRPydcYcsX6rtrCpYFl566gSPTBx7DGXSlg8/9:Bnkk8YAjhLYc4K1CWe6gSrBx7Rl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ