Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ddc58d55e5ff7dacb1106e4df9bb6b29_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ddc58d55e5ff7dacb1106e4df9bb6b29_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ddc58d55e5ff7dacb1106e4df9bb6b29_JaffaCakes118
Size
241KB
MD5
ddc58d55e5ff7dacb1106e4df9bb6b29
SHA1
bc218e7dac3c610d9bb919861bee3acd952319cf
SHA256
02e5abc5ebf5914b97f876a3598ddd6516303aeee5a6d9a80d7845b4638017d7
SHA512
6a99f6b0852731b760de27cd9dffc67f9a38be5e6721484523e03d8f78a0ace7ad4a01b502bea50893176c216c5a38643070459cbc101f1a7fdef387958edd10
SSDEEP
6144:GkeENDvTSn2SV/GuhYdViC7X57+nMoY/gJ41:GNEND/k/GLPX57+nBY/gW1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ