Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
df1e2ff75b257bfd93c04a3ac311cd0e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df1e2ff75b257bfd93c04a3ac311cd0e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
df1e2ff75b257bfd93c04a3ac311cd0e_JaffaCakes118
Size
234KB
MD5
df1e2ff75b257bfd93c04a3ac311cd0e
SHA1
2da77e3be67da8e4b676f7d8f6f60aa79e9b6666
SHA256
30403b0ef23d051d242cbc51ee27d3c29ddf9a9217f797c744417f5f3da7d394
SHA512
b9cb7f9037d42a8429fd9fef8cc750a8f7822e6c41d30283fb4fd07b382a758e4b599d685fff7c0282a8ad9b54db4814ecda4cf6eb83fe8cfa4a42e2369f7e5c
SSDEEP
6144:gbSvmsIrJDh2tjT1eFGSHWfMo5Zr9y8xH:gbImsIJhUFuHWfN5Zg8xH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ