Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ebc287373fdf5d50ab4b48eac28f3d09_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebc287373fdf5d50ab4b48eac28f3d09_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ebc287373fdf5d50ab4b48eac28f3d09_JaffaCakes118
Size
236KB
MD5
ebc287373fdf5d50ab4b48eac28f3d09
SHA1
2d3c9cfdba1e21b1781f1855c6fe84b3ee353a2d
SHA256
97f9e2486a6f9d37fed8ba41cd46c39c4995a0135d6c4a1bf27f422b1b7bf3c1
SHA512
737b9a7b708a3191641e6668d24f7773f9b28f8c92ec6ba46a894c5b7e80d5a901eb8e88248fbe059c2cba8c53d3d4e542825c22f0c83b2150976e8fbc4e158c
SSDEEP
6144:/03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB8/1CmXiaN:/c1udnLSg03ymK2Ilm1F4a4kC/1CmX1N
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ