Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
eadd3f345a33f8cc2195bc9b83494bda_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eadd3f345a33f8cc2195bc9b83494bda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
eadd3f345a33f8cc2195bc9b83494bda_JaffaCakes118
Size
241KB
MD5
eadd3f345a33f8cc2195bc9b83494bda
SHA1
946f6c9442e8829fa42a5f97dad85633a618c8a1
SHA256
0230342092ac967f8941bb98d65c4e184128f43770b3b6307ecf72d538c5c1a9
SHA512
9c4f9570d3199aaea0f4e932204d65ac37bd12b5fe2c98d4aff2151acfc41d7d326d680656e9a642bb0ea7c2f81932d94dcffa9959a9663eacc7856f09925028
SSDEEP
6144:QkeENDvTSn2SV/GuhYdViC7X57+nMhsu3Z6GNCPMEw:QNEND/k/GLPX57+nvHPjw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ