Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e219bc74efd659dcd02779ed672a1226_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e219bc74efd659dcd02779ed672a1226_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e219bc74efd659dcd02779ed672a1226_JaffaCakes118
Size
236KB
MD5
e219bc74efd659dcd02779ed672a1226
SHA1
118df182c7ec7dc859258009f07acf87b6555145
SHA256
fd30fb7a2671b156e781f43f009eb31d303900a19a71d9e1405014ea352f0799
SHA512
0133ab6d1ed3fa84e8e9b43b78bc56330c16829b6e5cd242796589f19b13aed7e08a254941a64eac9a379289d9710d4bed227cb795fce5e93483511e8a1fb3ec
SSDEEP
6144:A03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBcolHNkPuu3xz:Ac1udnLSg03ymK2Ilm1F4a4kiSsuuBz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ