Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
dee9b2dfa424bbc83546596f4c85b4df_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dee9b2dfa424bbc83546596f4c85b4df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
dee9b2dfa424bbc83546596f4c85b4df_JaffaCakes118
Size
236KB
MD5
dee9b2dfa424bbc83546596f4c85b4df
SHA1
d0e009cf9f7017c4778d50f4eba60c2f56aab096
SHA256
08c0a8cc77cd1b56b88261dcd3901b6a5ca1ef652aadc3fcbb32a09592d987d6
SHA512
dc449a611952e64ca36a1409c507a314ecff762fe61a7440d8101606959c3ec434e35f9ee0b32566328be61ac9bae9b0b2ca0a0e09cdf46872f56d097b9a4edc
SSDEEP
6144:i03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBDoQVmAGRJ4kzm:ic1udnLSg03ymK2Ilm1F4a4k9oQv2nzm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ