Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e12377b173a01481d23f0da34bef066b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e12377b173a01481d23f0da34bef066b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e12377b173a01481d23f0da34bef066b_JaffaCakes118
Size
234KB
MD5
e12377b173a01481d23f0da34bef066b
SHA1
0b4320d21d8988e41ce8598c6427ca2a58727e25
SHA256
70d5a42be4b83013dbd2e2cb3f21566fba133e96e08f76d7c044744f6bec030c
SHA512
020365c46963a180cbb8f16e43ec40726baae81cedad49d68a50714f87f8e782dc2b75bb7c004f23ca399ff419b5d936254b50d10e0ead6ed836c4345d41f6b4
SSDEEP
6144:hHaCVreB8ojFCB8Oq+q1R3CMObcqYYE5vW80FP:labB8ojFI8OqPJC7oqsvr0FP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ