Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e0fc13e7e78ee42bf334e5e54109dc46_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0fc13e7e78ee42bf334e5e54109dc46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e0fc13e7e78ee42bf334e5e54109dc46_JaffaCakes118
Size
236KB
MD5
e0fc13e7e78ee42bf334e5e54109dc46
SHA1
6cfd0bedab6fdd3e79c3bf7d7d7c2de059601ac2
SHA256
df0a478375f3fc7bf6f3d68862cc74ce43e818f57e9050103dd52011620c6a27
SHA512
ab08059ccc825c222f4e3755fd7d91140853d4d238849184efe7ec58090033a2a53aadf6d6e3617df4f9ef649882c3f6b34119aa2b5766a865b5c746a47c8630
SSDEEP
6144:g03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBZ88d8ID1qn5H:gc1udnLSg03ymK2Ilm1F4a4kE8d8Tn5H
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ