Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
e263427255f7486ee99d8fa7d8f4e206_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e263427255f7486ee99d8fa7d8f4e206_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e263427255f7486ee99d8fa7d8f4e206_JaffaCakes118
Size
200KB
MD5
e263427255f7486ee99d8fa7d8f4e206
SHA1
7497768accad1a528df843aebfb77beb16c968a1
SHA256
4902e6c41543c25ea0b13caa9f5c8e39ec6e6e62b9237c8280e9bb308468a37e
SHA512
2f922f76f49ca7a33da87a50ec6a233eb4a232c2f14f072ee2512517402fb3ced6b09c18573057822842e32781f3b775536db211fd87a76add742235376490fd
SSDEEP
6144:f7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRmM9Vzu:f78AqbaVcmAo7cGNpwCi+eQZmkzu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ