Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
dfff3bee8ecb5d62dfa4e32c0d192f36_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfff3bee8ecb5d62dfa4e32c0d192f36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
dfff3bee8ecb5d62dfa4e32c0d192f36_JaffaCakes118
Size
236KB
MD5
dfff3bee8ecb5d62dfa4e32c0d192f36
SHA1
38b62910e6e109c3f9846f16244187b3da1845a9
SHA256
43bcb3110398cdc62b5b60a144ed5d090a0db774d1d7fee4ba364e429272d01c
SHA512
72d5142dea531ed8334d8de7155cf0b800741f3155273795621a999a3cc29326fe796e9ac47d81bbc52171aa84caced8260c315875b5c4a1f526e3043c0ef80b
SSDEEP
6144:b03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncByzasKdBNvjsV5:bc1udnLSg03ymK2Ilm1F4a4kAzaL7vjA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ