Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ebee225c9c4366d9257eb9ea25567aba_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ebee225c9c4366d9257eb9ea25567aba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ebee225c9c4366d9257eb9ea25567aba_JaffaCakes118
Size
236KB
MD5
ebee225c9c4366d9257eb9ea25567aba
SHA1
f816bdd1345f9c38aa2b01e6a3635512f94b9d49
SHA256
9681bff3ce10bc223e56393d2cb29f8e60c2b4f74e0fe04d8b7982bb3bbee939
SHA512
e65ed6472941df3d798f6d392b9b3e9ee0c90dbeecab10b7fcf7fb848cd365adb90c70bccc33ccf4e42a6a6a72f6beee44c420863b5407054a64113930118959
SSDEEP
3072:nlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsIhJuvEQQ9MznJ:E3kOMeaavF17EP6qyqsIhJ+E7erJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ