Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
de9619c5ee1b84e4fe8da5a98684c61a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de9619c5ee1b84e4fe8da5a98684c61a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
de9619c5ee1b84e4fe8da5a98684c61a_JaffaCakes118
Size
207KB
MD5
de9619c5ee1b84e4fe8da5a98684c61a
SHA1
e27d4ca2a746730d8d5db3316b6ad5cdc16f46d1
SHA256
8632f287f2d7b463cb7d089214d9b3a6f54c83b535f81b0f8887d34ee3ffd526
SHA512
ab438bb252f00f3192c2e9170445700677ace3bdfb099cefef3918c3c24edc26e0e31caced908da751b461777ac1d47469e9ff9cf566016f85730ca3a6a76e73
SSDEEP
3072:qZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3Sub7ErnZ5GqQb3tXb:ppbaeyWECcp9AcFJ5qIU7qvGqi3tr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ