Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
eeb44fd0099ab0ebcdb2129faa41c3e7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeb44fd0099ab0ebcdb2129faa41c3e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
eeb44fd0099ab0ebcdb2129faa41c3e7_JaffaCakes118
Size
220KB
MD5
eeb44fd0099ab0ebcdb2129faa41c3e7
SHA1
b9fc94f13fea385f7e273c541ef2e0e47e7bf8c4
SHA256
449e1fb82311da71f1997b09277a8af2654ac8219239a5f013c6ad990c915048
SHA512
b3d4818a6ee0b7bbfbc46c1eca9125d51d7296af82cbd893176402ae53ddfd70b8f51c530f523bfbdebf99ea60cca1ebe69be56dc251217d0f871300accdb335
SSDEEP
3072:0dM/gorErzuZgr9OhQHccemSGudG2lAc3drWgxvC/Iwb1UCinZu/EIPg63uKEmEx:tgH00nemSGqQqcg+G9U/JP7PEmExWIwU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ