Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
eaaffa61ffdcf5b4ab043682d2e91f62_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaaffa61ffdcf5b4ab043682d2e91f62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
eaaffa61ffdcf5b4ab043682d2e91f62_JaffaCakes118
Size
241KB
MD5
eaaffa61ffdcf5b4ab043682d2e91f62
SHA1
303785443e9f5a6d34d24aee18802d4feeb448d2
SHA256
1a2f7756d1130b08f8850066d19b56b577fddc8182d1b7366e504d1e2e7a5ec0
SHA512
618b06cb47ef7bdcf527e03ef62e15300ca569f68c207558e74d0b74be0d993e45f52142ead143974d553d53e076681200616d5e8f2b071791511b3586074f70
SSDEEP
6144:WkeENDvTSn2SV/GuhYdViC7X57+nM15gAs6acfWEAY:WNEND/k/GLPX57+n+5gOnAY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ