Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
eae78d38d6cb4a6f3fd5997b744f1f39_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eae78d38d6cb4a6f3fd5997b744f1f39_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Target
eae78d38d6cb4a6f3fd5997b744f1f39_JaffaCakes118
Size
233KB
MD5
eae78d38d6cb4a6f3fd5997b744f1f39
SHA1
8c6d6a8dc856b87ab776f14e52b93b7f4de1a26b
SHA256
15b283ac00fdd18b8553c68f6ca81934deafb7bbb29f9f1e10a56503244c259e
SHA512
d3a578168fbd7525b18a579d2809e5b48dfa47d1c3a99ce71a11cebafc3e9b0a43e5bcc1ccbab1b86f87caaa3d4283d4f0d8ee823a86e8348805f06c68e20163
SSDEEP
6144:z7Gf5yIQg+gTTB2hPqkb9EPTqdLhiKUjZBE+4N52J:K5l50tTCPTqG7B4X2J
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ